Information System Security Manager - ISSM

The Ohio State University; United States; Hybrid; USD 104,000 - 135,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Paid time off & holidays

Retirement plan with employer-contrib.

Job summary

The Ohio State University is seeking an Information System Security Manager (ISSM) to lead cybersecurity compliance across national security and classified research initiatives. This role manages RMF packages, system security plans, and vulnerability remediation, collaborating with senior security leadership to ensure accredited operations on campus.

Hybrid work is considered, with most duties on campus. A strong background in RMF, NIST standards, and COMSEC is essential, along with excellent

Qualifications

• Bachelor’s degree required with at least 6 years of relevant experience.
• U.S. Citizenship with active national security clearance eligibility at the final Secret level or higher.
• Minimum 2 years in information security roles managing DoD RMF, DAAPM, or NISPOM.
• Experience developing RMF packages (SSPs, SCTMs, POA&Ms) and maintaining NIST-related controls.
• Familiarity with NIST SP 800-53/800-171 and security tools/databases (eMASS, Nessus, Splunk, DISA STIGs).
• Strong technical background across networking, operating systems, and privileged access management.
• Excellent verbal and written communication skills and meticulous attention to detail.

Responsibilities

• Oversee RMF lifecycle, including system security plans and control validation.
• Manage accreditation, vulnerability remediation, and continuous monitoring activities.
• Coordinate with CISO, Sr. FSO, and stakeholders to maintain compliance.
• Lead audits and inspections by DoD/DCSA and other oversight bodies.
• Maintain cryptographic hardware/COMSEC materials and asset tracking in relevant systems.

Skills

Verbal and written communication

Attention to detail

Networking OS proficiency

Team collaboration

Education

Bachelor’s degree in Computer Science, Cyber Security, Engineering, Information Technology, Software Engineering or equivalent

Tools

RMF packages (SSP, SCTM, POA&Ms)

NIST SP 800-53 / 800-171

eMASS

Nessus

Splunk

SCAP Compliance Checker

DISA STIGs

KMI/EKMS

TACLANE / KG-series / KIV devices

Job description

Screen reader users may encounter difficulty with this site. For assistance with applying, please contact [e-mail]. If you have questions while submitting an application, please review these frequently asked questions. Current Employees and Students: If you are currently employed or enrolled as a student at The Ohio State University, please log in to Workday to use the internal application process. Welcome to The Ohio State University's career site. We invite you to apply to positions of interest. In order to ensure your application is complete, you must complete the following: Ensure you have all necessary documents available when starting the application process. You can review the additional job description section on postings for documents that may be required. Prior to submitting your application, please review and update (if necessary) the information in your candidate profile as it will transfer to your application.

Job Title: Information System Security Manager - ISSM

Department: ERIK | Office of Secure Research

Position Overview

The Information System Security Manager (ISSM) plays a key role in the execution and oversight of Ohio State University’s National Security Program cybersecurity compliance, ensuring system integrity, classified data protection, and cryptographic security across national security and classified research initiatives. The position provides security program management and is responsible for supporting the development, implementation, accreditation, and continuous monitoring of information systems, as well as the management, control, accountability, and operational oversight of Communications Security (COMSEC) materials, cryptographic equipment, Controlled Cryptographic Items (CCI), and keying material. Compliance must be maintained under federal cybersecurity standards and national security directives, including the DoD Risk Management Framework (RMF), NIST SP 800-53, NIST SP 800-171, DoD CMMC, DAAPM, NISPOM, NSA COMSEC policies, and CNSSI directives. This position reports to the Sr. Facility Security Officer (Sr. FSO) within ERIK Research Integrity and collaborates with the Sr. FSO, Chief Information Security Officer (CISO), and institutional research leadership to maintain accredited operations. Utilizing highly complex technical knowledge, this position oversees the end-to-end lifecycle of System Security Plans (SSPs), security control validation, vulnerability remediation, and the lifecycle management of cryptographic hardware such as TACLANE, KG-series, KIV devices, and secure phones. The ISSM performs system audits and vulnerability assessments using technical security tools—including Nessus/Tenable, Splunk, Security Content Automation Protocol (SCAP) Compliance Checker, and DISA STIGs—while maintaining accurate accounting records in government tracking databases such as eMASS and electronic key management systems (KMI/EKMS). The ISSM serves as the primary contact for external security inspections, tests, command audits, and reviews conducted by oversight authorities (e.g., DCSA, Command Cyber Readiness Inspections). The position works closely with system owners, control assessors, Authorizing Officials, privileged users, and technical teams to enforce compliance policies, evaluate third-party RMF packages, investigate technical anomalies or COMSEC compromises, and maintain a robust security posture across operational systems.

Required Qualifications

• Bachelor’s degree in Computer Science, Cyber Security, Engineering, Information Technology, Software Engineering or an equivalent combination of education and experience.
• 6 years of relevant experience.
• U.S. Citizenship with an active national security clearance eligibility at the final Secret level or higher, or eligible to receive a clearance.
• Minimum of 2 years of direct experience in information security roles managing DoD RMF, DAAPM, or NISPOM compliance frameworks.
• Experience developing and maintaining RMF packages, including System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), and Plans of Action and Milestones (POA&Ms).
• Familiarity with the NIST frameworks including NIST SP 800-53 and NIST SP 800-171.
• Experience with security tools and enterprise tracking databases, including eMASS, Nessus, Splunk, SCAP Compliance Checker, DISA STIGs, KMI, or EKMS.
• Strong technical background across networking components, operating systems, and privileged user management.
• Superior verbal and written communication skills to articulate technical risks, author SOPs and security policies, and collaborate effectively with diverse stakeholders.
• Attention to detail.

Desired Qualifications

• 8 or more years of relevant experience.
• 2 years of experience in COMSEC specialty programs, procedures, key management policies, and asset control.
• Technical familiarity with cryptographic equipment (TACLANE, KG/KY/KIV devices, fill devices) and secure telephony systems.
• Experience preparing systems to meet requirements for a NIST SP 800-171 or NIST SP 800-53 assessment.
• Experience defining and documenting system boundaries and data flows.
• DoD 8570 / 8140 IAM Level II or III Certification (e.g., CISSP, CISM, GSLC, CASP+ CE).
• Completion of DAAPM Section 3.6 ISSM Required Training through the Center for Development of Security Excellence (CDSE).
• 5 or more years of cybersecurity experience within classified DoD or Intelligence Community (IC) environments.
• Formal completion of the NSA / DoD COMSEC Custodian Course and KMI / EKMS Training.

Application Materials

A resume and cover letter are required to be submitted at the time of application to be considered for this position.

Salary

The job profile's pay range is $104,000-$135,000. The salary that will be offered for this position will likely fall within this range and based on internal equity, the candidate's relevant work experience and qualifications, and the unit's available budget, which is the primary determining factor.

Work Location

We are open to considering candidates interested in hybrid work arrangements, although most of the job duties will require presence on campus.

Starting Day One: Comprehensive Benefits

Ohio State benefits give you options to take care of what matters most to you - and opportunities to make adjustments as your life and needs change, including:

• Medical, dental and vision coverage, with Ohio State paying a significant portion of the cost.
• Paid time off, including sick and vacation time and 11 holidays.
• State retirement plan or an alternative retirement plan, both with generous employer contributions.

Enterprise for Research, Innovation and Knowledge Overview

Join the Research Development Office within the Enterprise for Research, Innovation and Knowledge (ERIK) at The Ohio State University and become a part of a dynamic, forward-thinking team dedicated to pushing the boundaries of discovery and innovation. ERIK positions Ohio State to expand curiosity-driven research and creative expression, further develop our research community of faculty, staff, and students, and grow the innovation ecosystem to address big challenges and improve communities locally and globally. We are seeking passionate individuals who are committed to making a meaningful impact through collaboration, innovation, and excellence. To learn more about our mission and work, please visit our ERIK website.

Position Mapping

• Function: Information Technology
• Sub function: Information Security and Risk Management
• Career Band and Level: S4
• Location: Mount Hall (0311)
• Position Type: Regular
• Scheduled Hours: 40
• Shift: First Shift

Final candidates are subject to successful completion of a background check. A drug screen or physical may be required during the post offer process. Thank you for your interest in positions at The Ohio State University and Wexner Medical Center. Once you have applied, the most updated information on the status of your application can be found by visiting the Candidate Home section of this site. Please view your submitted applications by logging in and reviewing your status. For answers to additional questions please review the frequently asked questions. The university is an equal opportunity employer, including veterans and disability. At Ohio State, you’ll find work that inspires you. We offer roles and growth opportunities in countless fields and specialties — and including a job that’s right for you. Ohio State benefits give you options to take care of what matters most to you - and opportunities to make adjustments as your life and needs change, including: - Medical, dental and vision coverage, with Ohio State paying a significant portion of the cost. - Paid time off, including sick and vacation time and 11 holidays. - State retirement plan or an alternative retirement plan, both with generous employer contributions. As Buckeyes, we accomplish more together. No matter your role, you’ll be part of creating what people need now: pathways to education, research and health care. Working at Ohio State means you’re part of a team with a strong sense of community and an unwavering commitment to excellence - and, of course, incomparable Buckeye spirit. We bring out the best in people, help each other succeed and learn together. By joining Ohio State, you become part of a top-20 public university with one of America’s leading academic health centers. We’re a team of dedicated colleagues with access to boundless resources that support you. Review the Frequently Asked Questions for details on using Workday and submitting your application.