Cleared Information System Security Manager (ISSM) - L4

Virtual Service Operations; Beavercreek (OH); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health benefits

Flexible work arrangements

Competitive salary

Job summary

Virtual Service Operations seeks an ISSM to oversee information system security for Edge environments in Beavercreek, OH with up to 25% travel.

The role develops and enforces security policies, manages the RMF lifecycle, oversees ISSOs, and coordinates across configuration management, risk assessments and incident response.

Required: Active TS/SCI clearance, 5+ years in security management, experience with ISO 27001/NIST and DoD environments.

Qualifications

• Bachelor's degree or equivalent with 5+ years in information security leadership.
• 8+ years in technology roles with 5+ years in information security management.
• Active TS/SCI clearance required; DoD experience preferred.
• Strong knowledge of ISO 27001, NIST, HIPAA and related regulations.

Responsibilities

• Develop and maintain formal IS security program and policies for Edge environments.
• Develop and implement information security policies and oversee IS security implementation guidelines.
• Coordinate with PSO or cognizant security official on external information systems approvals.
• Ensure ISSOs under supervision are appointed and perform duties when needed.
• Conduct risk assessments and vulnerability testing; monitor security posture.

Skills

Leadership

RMF (NIST)

NIST ISO27001

DoD environments

SIEM tools

Communication

Education

Bachelor's degree in CS/Engineering/related

Tools

Firewall/IDS/IPS

SIEM

Security tools

Job description

Cleared Information System Security Manager (ISSM) - L4
Beavercreek, OH with some travel

Are you looking to take the next steps in your career as an Information System Security Manager (ISSM) — Level 4? Let's chat and see if we are a good match!

Virtual Service Operations is searching for an Information System Security Manager (ISSM) to join our dynamic team of experts in Beavercreek, OH. In this role, you will oversee the security of program information systems, ensuring compliance with industry standards and regulations while developing and implementing security policies and procedures. You'll manage the Risk Management Framework lifecycle, oversee ISSOs under your purview, and serve as a key point of coordination across configuration management, risk assessment, and incident response activities. Candidates should bring strong leadership, deep familiarity with security standards such as NIST and ISO 27001, and a background managing information security in classified DoD environments.

Key Responsibilities:

• Develop and maintain a formal IS security program and policies for the Edge environment.
• Develop and implement information security policies and procedures, and oversee operational IS security implementation guidelines.
• Coordinate with the PSO or cognizant security official on approval of external information systems.
• Ensure ISSOs under your purview are appointed in writing and follow established IS policies and procedures; assume ISSO responsibilities in their absence.
• Conduct risk assessments and vulnerability testing, and ensure periodic security posture testing is performed using intrusion/attack detection and monitoring tools.
• Monitor and respond to security incidents and threats.
• Maintain a repository of all organizational- and system-level cybersecurity documentation, including ATOs.
• Coordinate IS security inspections, tests, and reviews, and manage security audits and assessments.
• Ensure configuration management policies are followed for all hardware/software changes, coordinating with the appropriate AO prior to implementation.
• Serve as a voting member of the Configuration Control Board (CCB) and/or Risk Executive Board, with authority to veto changes deemed detrimental to security.
• Manage, maintain, and execute the information security continuous monitoring plan.
• Ensure a record of all security-related vulnerabilities is maintained, and report serious or unresolved violations to the AO/DAO.
• Develop and deliver security awareness training to employees.
• Maintain working relationships with the ISO, AO, SCA, and other ISSMs, and provide guidance to cybersecurity teammates.

Required Qualifications:

• Bachelor's degree in Computer Science, Engineering, Finance, Business, or a related field AND 3+ years of leadership experience in a relevant area of business, OR equivalent experience.
• 8+ years of demonstrated performance in related technology.
• 5+ years of experience in information security management.
• 5+ years of related experience in SCI/SAP environments.
• Active TS/SCI security clearance.
• Strong knowledge of security standards and regulations (e.g., ISO 27001, NIST, HIPAA).
• Experience with security tools and technologies (e.g., firewalls, intrusion detection/prevention systems, SIEM).
• Excellent communication and leadership skills.

Preferred Qualifications:

• 5+ years of leadership experience in a relevant area of business.
• Technical certifications in Azure.
• DoD IAT Level III Certification (CISSP or CASP).

Requirements

• Must be within driving distance of Beavercreek, OH OR willing to relocate there (relocation packages available)
• Must be willing to work onsite
• Strong written and verbal communication skills with excellent attention to detail and documentation accuracy.
• Ability to work independently and collaboratively in a mission-focused environment.
• Must be willing and able to travel up to 25%.
• Must possess an active TS/ SCI clearance or above
• Please note that pursuant to a government contract, this specific position requires U.S. citizenship status

What is Important to Us:

• You are an excellent communicator in writing and speaking.
• You have the ability to work independently but also value teamwork.
• Your problem-solving skills are excellent.
• You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
• You seek a community of virtue-centered co-workers and clients.

What we offer you:

As part of the VSO company, you will be part of a virtue-centered team who value their work and teammates. This is a no-jerk zone. We provide ongoing learning and development opportunities to foster continuous growth. We offer competitive salaries, health benefits, and flexible work arrangements.

• You are an excellent communicator in writing and speaking.
• You have the ability to work independently but also value teamwork.
• Your problem-solving skills are excellent.
You are looking for a job where performance appraisals occur regular ly, and you look forward to advancing your career.You seek a community of virtue-centered co-workers an d clients.

More About VSO:

VSO is a hybrid cloud and managed services consulting firm. Much of VSO's success can be attributed to our deep partnerships with IT services industry leaders such as AWS, IBM, Microsoft and others. VSO leverages numerous other partner relationships so as to provide our customers with optimal support. Additionally, we take pride in taking care of our employees. We offer a wide variety of benefits for eligible employees related to health, retirement, professional development, and more! For more information, please visit our website at https://vso-inc.com/careers