Information Systems Security Manager (ISSM)

Riverside Research Institute•Beavercreek, OH

5d•$130,000 - $180,000•Onsite

About The Position

Riverside Research is seeking an Information System Security Manager to administer several classified programs, to include Assessment & Authorization (A&A) requirements. This position functions as an ISSM, responsible for the development and oversight of a comprehensive information security program as identified in applicable customer requirements to include NISPOM, ICD 503/CNSSI 1253, DFARS, NIST 800-53, NIST 800-171, JSIG, etc. All Riverside Research opportunities require U.S. Citizenship.

Requirements

Active Top Secret/SCI Security Clearance and the ability to obtain and maintain a polygraph
Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Assurance, Business, or a related discipline.
Twelve (12) years of progressively responsible experience in cybersecurity, information assurance, governance, risk, compliance, or related disciplines, including at least three (3) years of leadership experience managing technical teams or enterprise cybersecurity programs.
NIST 800-53 and Risk Management Framework (RMF) based accreditations
Working in a classified environment consisting of multiple Collateral, SCI and/or SAP systems
Managing multiple projects at one time that could have many tasks within each.
Working with Windows operating systems
Developing standard operating procedures and system security plans
Supervising and mentoring ISSO level team
Current DoD 8570.1-M IAM Level 1 Certification
Self-motivated and possess good written, verbal, listening and presentation skills
Strong customer service, leadership and team building skills
Organizational skills to include: attention to detail, time management, ability to multitask and prioritize.

Responsibilities

Create and maintain A&A packages, System Security Plans (SSPs), Risk Assessment Reports (RARs), Security Controls Traceability Matrices (SCTMs) and Plans of Action & Milestones (POA&Ms) for assigned classified systems
Establish and administer appropriate security systems, policies, standards, and procedures in compliance with applicable government and corporate directives, guidelines, and contractual obligations
Conduct analysis and assessment of the security control assessment guidance, procedures, and templates, ensuring correct and uniform implementation of the new RMF based assessment processes
Configure and validate information system compliance using DISA STIGs, SCAP Compliance Checker (SCC) and STIG Viewer
Conduct regular audits/CM in accordance with government customer requirements
Provide technical and professional leadership to support personnel, provide oversight for assigned classified system compliance and conduct self-assessments at multiple Riverside Research offices
Provide CM for security-relevant information system software, hardware and firmware
Investigate information system security violations and prepare reports with corrective actions and preventative measures.
Make recommendations regarding tools, trend analysis and applicable network countermeasures
Interfaces directly with DCSA or other DoD entities to conduct Information System security inspections, tests, and reviews
Guarantee system security requirements are addressed during all phases of system life cycle
Ensures system security assessments and audits are completed and documented
Certify that all Information System authorization documentation is current and accessible to authorized individuals
Supervise assigned ISSO's