Information Systems Security Manager (ISSM)

Riverside Research Institute•Beavercreek, OH

About The Position

Riverside Research is seeking an Information System Security Manager (ISSM) to administer several classified programs, including Assessment & Authorization (A&A) requirements. The ISSM develops and oversees a comprehensive information security program in accordance with customer requirements and applicable standards, including NISPOM, ICD 503/CNSSI 1253, DFARS, NIST 800-53, NIST 800-171, and JSIG. The position provides technical and professional leadership to security support personnel, oversees compliance for assigned classified systems, and supervises assigned ISSOs. The role requires an active Top Secret/SCI clearance and the ability to obtain and maintain a CI Poly. The employee must live or relocate within a commutable distance of Beavercreek, Ohio. Riverside Research is a not-for-profit, technology-oriented defense company and offers comprehensive compensation and benefits. The stated compensation range is $130,000–$180,000.

Requirements

Active Top Secret/SCI security clearance and ability to obtain and maintain a CI Poly.
Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Assurance, Business, or a related discipline.
Twelve years of progressively responsible experience in cybersecurity, information assurance, governance, risk, compliance, or related disciplines, including at least three years of leadership experience managing technical teams or enterprise cybersecurity programs.
Experience with NIST 800-53 and Risk Management Framework (RMF)-based accreditations.
Experience working in classified environments with multiple Collateral, SCI, and/or SAP systems.
Experience managing multiple projects with potentially many tasks in each.
Experience working with Windows operating systems.
Experience developing standard operating procedures and system security plans.
Experience supervising and mentoring ISSO-level personnel.
Current DoD 8570.1-M IAM Level 1 certification.
Self-motivation and good written, verbal, listening, and presentation skills.
Strong customer service, leadership, and team-building skills.
Organizational skills, including attention to detail, time management, and the ability to multitask and prioritize.
Must live or relocate within a commutable distance of Beavercreek, Ohio.
U.S. citizenship is required for Riverside Research opportunities.

Responsibilities

Create and maintain A&A packages, System Security Plans (SSPs), Risk Assessment Reports (RARs), Security Controls Traceability Matrices (SCTMs), and Plans of Action & Milestones (POA&Ms) for assigned classified systems.
Establish and administer security systems, policies, standards, and procedures in compliance with government and corporate directives, guidelines, and contractual obligations.
Analyze and assess security control assessment guidance, procedures, and templates to ensure correct and uniform implementation of RMF-based assessment processes.
Configure and validate information system compliance using DISA STIGs, SCAP Compliance Checker (SCC), and STIG Viewer.
Conduct regular audits and configuration management in accordance with government customer requirements.
Provide technical and professional leadership to support personnel, oversee assigned classified system compliance, and conduct self-assessments at multiple Riverside Research offices.
Perform configuration management for security-relevant information system software, hardware, and firmware.
Investigate information system security violations and prepare reports identifying corrective actions and preventative measures.
Make recommendations regarding tools, trend analysis, and applicable network countermeasures.
Interface with DCSA or other DoD entities to conduct information system security inspections, tests, and reviews.
Ensure system security requirements are addressed throughout all phases of the system life cycle.
Ensure system security assessments and audits are completed and documented.
Certify that information system authorization documentation is current and accessible to authorized individuals.
Supervise assigned ISSOs.