Top 3319 It security manager Jobs

RMF, Security, and ATO Manager
All In Solutions —Remote
- Up to $180,000 a year
- Full-time
- Remote
- 7 years
- HIPAA
- Master's degree
Quick Apply
12d
SOC Supervisor
Charter Technology Solutions —Remote
- $110,000 - $115,000 a year
- Full-time
- Remote
- Computer science
- Computer Science
- Supervising experience
- Commuter assistance
- Paid parental leave
Quick Apply
11d
Information Security Manager
The Vertex Companies, LLC —Remote
- $80,000 - $299,000 a year
- Full-time
- Remote
- Azure
- 6 years
- Master's degree
- Paid holidays
- Disability insurance
Manager, Cyber Security
mSupply —Remote
- $135,000 - $155,000 a year
- Overtime
- Remote
- Azure
- 5 years
- AWS
- Health savings account
- Paid holidays
Quick Apply
Manager, Security Incident Response Team (USA)
GitLab —Remote
- $150,000 - $235,000 a year
- Weekends as needed
- Remote
- AWS
- Analysis skills
- Recruiting
- Employee stock purchase plan
- Health insurance
SOC Manager
Baylor Scott & White Health —Remote
- $59.81 - $92.72 an hour
- Azure
- Customer service
- AWS
Continuous Threat Exposure Manager
Ascension —Remote
- $138,258.29 - $195,187.61 a year
- Full-time
- Remote
- Mid-level
- High school diploma or GED
- Associate's degree
- Disability insurance
- Health insurance
Manager, Security Engineering
GoodRx —Remote
- $185,000 - $323,000 a year
- Full-time
- Computer science
- Computer Science
- Java
- Employee stock purchase plan
- Paid holidays
Engineering Manager, Security Detection & Response
Apollo.io —Remote
- $225,400 - $281,800 a year
- Remote
- Google Workspace
- Analysis skills
- Senior level
- Health savings account
- AD&D insurance
9d
IT Cybersecurity Manager
UNION HOME MORTGAGE CORP —Remote
- Remote
- Computer science
- 7 years
- Computer Science
Quick Apply
Manager, Security Engineering
Acquia —Remote
- $150,000 - $169,750 a year
- Remote
- Research
- Residential
- Continuous improvement
- Health insurance
- Parental leave
Quick Apply
Senior Engineering Manager, Privacy Security
Instacart —Remote
- $243,000 - $279,000 a year
- Remote
- Computer Science
- 5 years
- System design
Policy and Compliance Lead - USA Remote
Danaher Corporation —New York, NY
- $130,000 - $160,000 a year
- Full-time
- Remote
- HIPAA
- 3 years
- Continuous improvement
- Health insurance
- Dental insurance
Service Manager – Exposure Intelligence
Allstate —Remote
- $134,000 - $209,750 a year
- Remote
- Analysis skills
- US work authorization
- Fair chance
- Work from home
Senior Manager, Security Compliance
GitLab —Remote
- $168,000 - $245,000 a year
- Full-time
- Remote
- Continuous improvement
- Mentoring
- Scripting
- Employee stock purchase plan
- Health insurance
Senior Manager, Customer Trust & Security Governance
GitLab —Remote
- $168,000 - $245,000 a year
- Full-time
- Remote
- Continuous improvement
- Training & development
- Senior level
- Employee stock purchase plan
- Health insurance
GRC Program Manager - Remote
Velera —Remote
- $110,100 - $143,100 a year
- Full-time
- Remote
- 8 years
- Senior level
- Wellness program
- Health savings account
10d
IT Security Senior Project Manager
UST —San Jose, CA
- Remote
- Bachelor's degree
- Experience equivalent to degree accepted
- Senior level
- Paid holidays
- Disability insurance
Quick Apply
Sr. Manager, Application Security
Prosper —Remote
- $226,000 - $270,000 a year
- Full-time
- Remote
- Computer Science
- 3 years
- Bachelor's degree
- Paid parental leave
- Health insurance
Quick Apply
Sr. Audit Manager
M&T Bank —Remote
- $205,500 - $215,500 a year
- Full-time
- Remote
- Computer Science
- Office
- Bachelor's degree

I want to receive the latest job alert for it security manager

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

it security manager jobs near

RMF, Security, and ATO Manager

All In Solutions
Remote

Quick Apply

Job Details

Full-time | Contract
Up to $180,000 a year
12 days ago

Qualifications

CISSP
Master's degree
Nessus
Bachelor's degree
Vulnerability management

Full Job Description

● Brief Description: The RMF, Security, and ATO Manager serves as the lead responsible for overseeing cybersecurity compliance, Risk Management Framework implementation, and authorization activities supporting a complex, mission-critical cloud platform and associated systems hosted in AWS GovCloud. This role manages all six steps of the NIST RMF process (Categorize, Select, Implement, Assess, Authorize, Monitor), maintains continuous compliance with applicable Federal laws, VA policies, and NIST guidance, and ensures uninterrupted Authority to Operate status across the platform and all tenant authorization boundaries.

● Responsibilities:

○ Manage the full RMF and ATO lifecycle including initiating new Authorities to Operate and Connect, maintaining existing authorizations, and ensuring no lapse in ATO status for any platform capability, service, or hosted application

○ Coordinate all authorization activities with the Government Authorizing Official, Information System Security Officer, Information System Owner, and other designated stakeholders

○ Attend or conduct all security audits including Inspector General security/RMF audits, Security Assessment and Validation Directorate assessments, Cybersecurity Compliance Task Force audits, and assessments by Office of Information Security, Information Security Risk Management, Governance Risk and Compliance, and external assessment teams

○ Maintain all program security documents, diagrams, and RMF artifacts including Privacy Threshold Analysis, Privacy Impact Analysis, Security Impact Analysis, Business Impact Analysis, Interconnection Diagrams, High-Level Diagrams, security assessment boundary diagrams, Data Security Categorization, hardware and software lists, and Ports Protocols and Services Management documents

○ Create and maintain Plan of Actions and Milestones within SNOWCAM, ensuring proper alignment to NIST security families and Control Correlation Identifiers, with POA&Ms closed once mitigated, overcome by events, or no longer relevant

○ Manage the multi-tenant authorization environment including ATO inheritance framework, authorization boundaries, and security control allocation between platform and tenants

○ Ensure continuous monitoring activities are performed in accordance with VA and OIT policies including routine vulnerability scanning of infrastructure, containers, applications, and code repositories

○ Track, report, and ensure remediation of vulnerabilities within Government-defined timelines

○ Conduct regular user access audits ensuring inactive accounts are removed and existing accounts contain only required access, enforcing role-based access management, Zero Trust Architecture, and least-privilege principles

○ Submit and maintain Technical Reference Model requests for licensed software and application usage, drafting justification and attending TRM approval board meetings

○ Submit and maintain Business Partner Extranet connection requests, managing the connection request process and cataloging all BPE connections

○ Create and maintain Incident Response Plans and Disaster Recovery Plans including RACI charts, and host annual tabletop exercises as mandated

○ Rotate service account credentials in accordance with VA security policy and NIST guidelines

○ Ensure compliance with all HIPAA, Privacy Act, FISMA, NIST, FIPS, and VA security and privacy directives

○ Prepare and submit comprehensive monthly RMF, Security, and ATO Reports detailing authorization posture, control implementation status, vulnerability findings, POA&M tracking, and remediation progress with deficiencies identified on the first page

○ Provide immediate notification of any condition that could jeopardize ATO status

○ Coordinate closely with the Program Manager, Technical Directors, and Government cybersecurity personnel

● Qualifications:

○ Demonstrated experience managing RMF and ATO processes for complex enterprise or mission-critical systems

○ Experience supporting Federal Government programs and systems operating in cloud or hybrid environments

○ Deep expertise in Federal cybersecurity frameworks including NIST SP 800-53 Rev. 5, NIST SP 800-37 Rev. 2, FISMA, FedRAMP, and FIPS 140-3

○ Experience managing all six steps of the NIST RMF process (Categorize, Select, Implement, Assess, Authorize, Monitor)

○ Hands-on experience with security posture tracking systems (SNOWCAM, eMASS, or equivalent)

○ Experience managing Plan of Actions and Milestones through full maturity cycles including creation, remediation tracking, and closure

○ Knowledge of multi-tenant authorization environments including ATO inheritance, authorization boundary management, and security control allocation

○ Experience conducting and supporting security audits and assessments from multiple oversight organizations

○ Knowledge of vulnerability scanning tools (Nessus or equivalent) and continuous monitoring practices

○ Experience with credential and account management including Zero Trust Architecture and least-privilege enforcement

○ Familiarity with VA-specific security governance including VA Handbook 6500, VA Directive 6500, VA Critical Security Controls, and FICAM requirements

○ Experience with TRM submission and governance processes

○ Experience with BPE connection management processes

○ Strong communication skills with ability to brief Government cybersecurity leadership on authorization status, security posture, and risk mitigation

○ Certified Information Systems Security Professional (CISSP) required

○ Certified Authorization Professional (CAP) or equivalent RMF certification preferred

○ Bachelor's Degree from an accredited academic institution with a minimum of 10 years of experience in cybersecurity, RMF, or ATO management, with at least 5 years managing authorization activities for mission-critical Federal Government systems operating in cloud environments

○ OR

○ Master's Degree from an accredited academic institution with a minimum of 7 years of experience in cybersecurity, RMF, or ATO management, with at least 3 years managing authorization activities for mission-critical Federal Government systems operating in cloud environments

● Plus:

○ Department of Veterans Affairs (VA) experience

○ Active Personal Identity Verification (PIV) card

○ Experience with VA-specific RMF processes including SNOWCAM, ICAMP, and OIS Unified Services Portal

○ Experience managing ATO for platforms supporting 200+ applications with tiered multi-tenant authorization boundaries

○ Experience with VA security governance offices including OIS, ISRM, GRC, ISPS, ECSD, SAVD, and CCTF

Pay: Up to $180,000.00 per year

Work Location: Remote

Quick Apply

Refine Your Search

it security manager jobs

RMF, Security, and ATO Manager

SOC Supervisor

Information Security Manager

Manager, Cyber Security

Manager, Security Incident Response Team (USA)

SOC Manager

Continuous Threat Exposure Manager

Manager, Security Engineering

Engineering Manager, Security Detection & Response

IT Cybersecurity Manager

Manager, Security Engineering

Senior Engineering Manager, Privacy Security

Policy and Compliance Lead - USA Remote

Service Manager – Exposure Intelligence

Senior Manager, Security Compliance

Senior Manager, Customer Trust & Security Governance

GRC Program Manager - Remote

IT Security Senior Project Manager

Sr. Manager, Application Security

Sr. Audit Manager

I want to receive the latest job alert for it security manager

Related Searches

Explore jobs in more locations

Job Seeker Tools

Employer Tools

Browse

Stay Connected