Information Systems Security Manager (ISSM)

Modern Technology Solutions Inc•Beavercreek, OH

1d•Onsite

About The Position

MTSI is seeking experienced Information Systems Security Managers to support critical national security programs in Beavercreek, Ohio. Openings support Training, Air Vehicle, and Ground systems environments. The ISSM serves as the primary cybersecurity advisor for assigned systems and stakeholders, ensuring compliance with Department of Defense, Intelligence Community, and program-specific security requirements while enabling mission success. Strong experience in cybersecurity, information assurance, risk management, and security compliance within classified environments is sought; experience supporting Special Access Programs is highly desired. The Training ISSM supports training systems and simulation environments used to prepare operational personnel, maintaining cybersecurity compliance while enabling realistic mission rehearsal and distributed training operations. The Air Vehicle ISSM supports cybersecurity activities for developmental and operational test aircraft, airborne mission systems, and flight-test infrastructure. The Ground ISSM supports ground-based mission systems, networks, data processing, and operational support infrastructure. The position requires at least eight years of related cybersecurity, information assurance, or information systems security experience, a bachelor's degree or higher for Senior positions, and a bachelor's degree for SME positions. Candidates must hold an IAM Level II certification and an active Top Secret clearance with SCI eligibility.

Requirements

At least 8 years of related cybersecurity, information assurance, or information systems security experience.
Senior positions require a bachelor's degree or higher; SME positions require a bachelor's degree. Equivalent combinations of education and experience may be considered.
Possess one IAM Level II certification: Security+, CISSP, CASP+ CE, CGRC, or CISM.
Active Top Secret (TS) clearance; SCI eligibility required.

Nice To Haves

Experience supporting SAP, SCI, or other classified environments is highly desired.
For Air Vehicle roles: experience supporting airborne platforms or aviation-related systems; knowledge of cybersecurity requirements and security controls for Platform Information Technology (PIT) systems; familiarity with weapons-system cybersecurity principles.
For Ground roles: experience supporting enterprise IT, mission systems, or operational ground infrastructures; knowledge of system administration and network security principles; familiarity with RMF and continuous monitoring processes.
Desired cross-position skills include Risk Management Framework (RMF), NIST 800-53 security controls, vulnerability management, security audits and assessments, POA&M management, system authorization and accreditation, SAP and SCI environments, strong communication and stakeholder coordination, and program security and cybersecurity compliance expertise.
For SME positions, a master's degree is preferred.

Responsibilities

Design, integrate, implement, modify, and coordinate the installation, testing, operation, and disposition of cybersecurity, information assurance, and compliance systems involving hardware and software.
Coordinate with industry partners on digital infrastructure and cybersecurity requirements.
Serve as liaison between industry partners, Program Security Offices, and Authorizing Officials.
Review system specifications, technical documentation, and security architectures.
Support Mission Risk Assessment Process – Cyber (MRAP-C) events.
Monitor availability, serviceability, and recoverability of technology security systems.
Review cybersecurity policies, procedures, tools, and technical implementations.
Evaluate system configurations and security controls.
Review installation and integration of system patches, updates, and enhancements.
Ensure rigorous application of information security and information assurance policies and practices.
Evaluate risk assessments and recommend approaches for system, network, and application design, implementation, and operation.
Evaluate vulnerability assessments and identify deviations from approved configurations and security policies.
Monitor corrective actions resulting from audits, assessments, and inspections.
Review contractor and organizational Plans of Action and Milestones (POA&Ms).
Meet regularly with stakeholders to assess requirements and mission needs.
Support certification, accreditation, and authorization activities by coordinating required documentation.
Evaluate program control processes and recommend risk mitigation strategies.
Review periodic audits of systems and networks.
Verify implementation of required security policies, procedures, and technical controls.
Apply project management principles to security-related efforts and initiatives.
Coordinate communications about cybersecurity policies, procedures, vulnerabilities, and risk-assessment results.
For training systems: support cybersecurity requirements for training simulators and mission planning systems; coordinate accreditation activities for training systems and associated networks; assess effects of software updates and cybersecurity controls on training capabilities; collaborate with training organizations to balance operational realism with security; and manage the cybersecurity posture of standalone and connected training systems.
For air vehicle systems: ensure cybersecurity compliance of airborne and aviation-related information systems; coordinate cybersecurity assessments; review cybersecurity impacts for test equipment, mission systems, and data-collection architectures; support aviation-platform vulnerability management; and work with engineers, program offices, and operational stakeholders to maintain secure environments.
For ground systems: oversee cybersecurity compliance of enterprise and mission-support systems; support secure integration of hardware, software, cloud, and network technologies; review security architectures and technical solutions; coordinate vulnerability management and continuous monitoring; and manage cybersecurity documentation, inspections, and authorization activities for operational ground systems.