Information Systems Security Manager (ISSM)

Riverside Research Institute•Beavercreek, OH

2d•$130,000 - $180,000

About The Position

Riverside Research is seeking an Information System Security Manager to administer several classified programs, including Assessment & Authorization (A&A) requirements. The ISSM develops and oversees a comprehensive information security program aligned with customer requirements and applicable standards, including NISPOM, ICD 503/CNSSI 1253, DFARS, NIST 800-53, NIST 800-171, and JSIG. The role provides technical and professional leadership to support personnel and oversees compliance for assigned classified systems across multiple Riverside Research offices. The position requires an active Top Secret/SCI clearance and the ability to obtain and maintain a CI Poly, and the employee must live or relocate within commuting distance of Beavercreek, Ohio.

Requirements

Active Top Secret/SCI security clearance and ability to obtain and maintain a CI Poly.
Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Assurance, Business, or a related discipline.
Twelve years of progressively responsible experience in cybersecurity, information assurance, governance, risk, compliance, or related disciplines, including at least three years of leadership experience managing technical teams or enterprise cybersecurity programs.
Experience with NIST 800-53 and Risk Management Framework (RMF)-based accreditations.
Experience working in a classified environment consisting of multiple Collateral, SCI, and/or SAP systems.
Experience managing multiple projects with numerous tasks.
Experience working with Windows operating systems.
Experience developing standard operating procedures and system security plans.
Experience supervising and mentoring ISSO-level teams.
Current DoD 8570.1-M IAM Level 1 certification.
Self-motivated, with good written, verbal, listening, and presentation skills.
Strong customer service, leadership, and team-building skills.
Organizational skills, including attention to detail, time management, and the ability to multitask and prioritize.
Must live or relocate to a commutable distance of Beavercreek, Ohio.
U.S. Citizenship is required for all Riverside Research opportunities.

Responsibilities

Create and maintain A&A packages, System Security Plans (SSPs), Risk Assessment Reports (RARs), Security Controls Traceability Matrices (SCTMs), and Plans of Action & Milestones (POA&Ms) for assigned classified systems.
Establish and administer security systems, policies, standards, and procedures in compliance with government and corporate directives, guidelines, and contractual obligations.
Analyze and assess security control assessment guidance, procedures, and templates to ensure correct and uniform implementation of new RMF-based assessment processes.
Configure and validate information system compliance using DISA STIGs, SCAP Compliance Checker (SCC), and STIG Viewer.
Conduct regular audits and configuration management in accordance with government customer requirements.
Provide technical and professional leadership to support personnel, oversee compliance for assigned classified systems, and conduct self-assessments at multiple Riverside Research offices.
Perform configuration management for security-relevant information system software, hardware, and firmware.
Investigate information system security violations and prepare reports identifying corrective actions and preventive measures.
Make recommendations regarding tools, trend analysis, and applicable network countermeasures.
Interface directly with DCSA or other DoD entities to conduct information system security inspections, tests, and reviews.
Ensure system security requirements are addressed throughout all phases of the system life cycle.
Ensure system security assessments and audits are completed and documented.
Certify that information system authorization documentation is current and accessible to authorized individuals.
Supervise assigned ISSOs.