Information Systems Security Manager (ISSM)

Modern Technology Solutions, Inc.; Bath Township (OH); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Job summary

Modern Technology Solutions, Inc. (MTSI) seeks an Information Systems Security Manager to oversee security posture for Wright-Patterson AFB systems.

You will lead risk assessments, implement a comprehensive security program, and collaborate with administrators, developers, and engineers to protect data confidentiality, integrity, and availability.

Qualifications

• 8+ years in information security with ≥3 years as ISSM or in a similar role.
• Strong understanding of cybersecurity principles and risk management.
• Experience with security tools: vulnerability scanners, firewalls, IDS, DLP.

Responsibilities

• Create, implement, and maintain security policies aligned with NIST/ISO/HIPAA/PCI DSS.
• Conduct risk assessments and remediation tracking.
• Manage security controls: access controls, IDS, firewalls, DLP.
• Lead security incident response investigations and lessons learned.
• Develop and deliver security awareness training.
• Ensure regulatory compliance and support audits.
• Collaborate with IT teams to integrate security in design and operations.
• Advise projects on security risks and recommendations.
• Stay updated on threats and technologies; drive security improvements.
• Maintain SSPs and comprehensive security documentation.

Skills

Cybersecurity principles

Risk management

Security controls

Attention to detail

Customer service

Continuous learning

Impact-driven

Education

Master's degree in CS/IS/C cybersecurity

Tools

Vulnerability scanners

Penetration testing tools

Firewalls

Intrusion Detection Systems

Anti-malware

Data Loss Prevention (DLP)

Job description

As an Information Systems Security Manager with MTSI you will be responsible for the security posture of assigned information systems, ensuring compliance with relevant security policies, procedures, and regulations. You will work closely with system administrators, developers, network engineers, and other stakeholders to implement, maintain, and monitor security controls, and to ensure the confidentiality, integrity, and availability of organizational data and systems. This position will be located at Wright-Patterson AFB.

You’ll be a great fit for this role if:

• Have a deep understanding of cybersecurity principles, risk management methodologies, and technical security controls.
• Paying attention to detail and providing excellent customer service in a professional environment is a skill you excel at.
• You are passionate about continuous learning and growth, and you seek opportunities to challenge yourself.
• You are driven to make a meaningful impact through your work.

Responsibilities:

Duties to be independently executed include but are not limited to:

• Create, implement, and maintain system-specific security policies, standards, and procedures, ensuring they align with organizational and regulatory requirements (e.g., NIST, ISO, HIPAA, PCI DSS) and are effectively communicated and enforced.
• Conduct regular risk assessments and vulnerability scans to identify security vulnerabilities and potential threats to systems, developing and implementing effective mitigation strategies and tracking remediation efforts.
• Implement and maintain a comprehensive suite of security controls, including access controls, intrusion detection systems, firewalls, anti-malware software, and data loss prevention (DLP) solutions, ensuring optimal configuration and adherence to best practices.
• Participate actively in security incident response activities, including thorough investigation, containment, eradication, and recovery, documenting incidents meticulously and extracting valuable lessons learned to improve future responses.
• Develop and deliver engaging security awareness training programs for users and system administrators, fostering a culture of security awareness throughout the organization.
• Ensure continuous compliance with relevant security regulations and standards (e.g., NIST, ISO, HIPAA, PCI DSS), preparing for and participating in security audits and assessments, and maintaining comprehensive documentation to support compliance efforts.
• Collaborate closely with system administrators, developers, network engineers, and other stakeholders to seamlessly integrate security into all phases of system design, development, and operation.
• Serve as a trusted security advisor to project teams and business units, proactively communicating security risks and providing well-informed recommendations to management.
• Stay abreast of the latest security threats, vulnerabilities, and cutting-edge technologies, recommending and implementing ongoing improvements to security policies, procedures, and controls, and participating in industry security forums.
• Maintain accurate and up-to-date documentation of security configurations, policies, procedures, and incident responses, developing and maintaining system security plans (SSPs) and other essential security-related documentation.

Qualifications Required:

• 8+ years experience in information security, with at least 3 years of experience as an ISSM or in a similar role.
• Strong understanding of cybersecurity principles, risk management methodologies, and security controls.
• Experience with security assessment tools, such as vulnerability scanners and penetration testing tools.
• Experience with security technologies, such as firewalls, intrusion detection systems, anti-malware software, and data loss prevention (DLP) solutions.
• Knowledge of operating systems (Windows, Linux), networking protocols, and cloud computing environments.

Education:

• Master's degree in Computer Science, Information Systems, Cybersecurity, or a related field. 8 additional years of relevant experience may be substituted for master's degree.

Even better if you have these desired skills:

• Relevant security certifications are highly desirable, such as:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• CompTIA Security+
• GIAC certifications (e.g., GSEC, GCIH, GCIA)

• Familiarity with scripting languages (e.g., Python, PowerShell) is a plus.
• Creative problem-solving, analytical skills, agile under pressure, and impeccable business judgment.
• Ability to establish priorities, work independently, successfully execute multiple projects, and proceed with objectives with minimal supervision.
• Excellent interpersonal and relationship building skills across several diverse technical and non-technical groups.

Clearance Requirements:

• Must possess an active DoD TS/SCI with in-scope SSBI and SAP eligibility.
• Please note: U.S. Citizenship is required.

Interesting Work:

Our co‑workers support some of the most important and critical programs to our national defense and security.

Values:

Our first core value is that employees come first. We challenge our co‑workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.

100% Employee Owned:

We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town‑hall meetings three times a year.

Great Benefits - Most Full‑Time Staff Are Eligible for:

• Starting PTO accrual of 20 days PTO/year + 10 holidays/year
• Flexible schedules
• 6% 401k match with immediate vesting up to $9k annually
• Semi‑annual bonus eligibility (July and December)
• Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement account
• Up to $10,000 in annual educational reimbursement
• Other company funded benefits, like life and disability insurance
• Optional zero deductible Blue Cross/Blue Shield health insurance plan

Track Record of Success:

We have grown every year since our founding in 1993.

Modern Technology Solutions, Inc. (MTSI) is a 100% employee‑owned engineering services and solutions company that provides high‑demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance

MTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.

For more information about MTSI, please visit www.mtsi‑va.com

MTSI embraces nine core values including our first core value of Employees come first. Consistent with our Core Values, we are committed to Equal Opportunity, making decisions without regard to race, color, religion, sex, national origin, age, military/veteran status, disability, or any other characteristics protected by applicable law. MTSI is committed to Equal Employment Opportunity and providing reasonable accommodations to applicants and employees with physical and/or mental disabilities.