Information Systems Security Manager (ISSM)

Riverside Research Institute; Beavercreek (OH); On-site; USD 130,000 - 180,000; Full time

Job summary

Riverside Research Institute seeks an Information System Security Manager to administer multiple classified programs, serving as ISSM and leading the information security program per NIST/NISPOM guidance. The role requires DoD-style RMF oversight and coordination with DCSA and other entities.

You will develop SSPs, risk assessments, and POA&Ms, manage compliance tooling, and supervise ISSO staff, ensuring ongoing authorization for sensitive systems across facilities.

Qualifications

• Active Top Secret/SCI clearance or ability to obtain; polygraph preferred.
• Bachelor’s degree in Cybersecurity, IS, CS, or related discipline.
• 12+ years in cybersecurity/IA with 3+ years leading technical teams or programs.
• Experience with RMF/NIST controls, accreditations, and classified environments.

Responsibilities

• Create and maintain A&A packages, SSPs, RARs, SCTMs, and POA&Ms for classified systems.
• Establish and administer security policies, standards, and procedures per DoD and contractual obligations.
• Conduct analysis of RMF guidance and ensure proper implementation of assessment processes.
• Configure compliance using DISA STIGs, SCC, and STIG Viewer.
• Perform regular audits and provide leadership to ISSO teams across offices.
• Provide CM for security-relevant software, hardware, and firmware.
• Investigate security violations and report corrective actions.

Skills

Security leadership

RMF expertise

NIST 800-53

Team management

Education

Bachelor's degree in Cybersecurity or related field

Tools

DISA STIGs

SCAP Compliance Checker

SCC

SSP development

Job description

Riverside Overview

Riverside Research is an independent National Security Nonprofit dedicated to research and development in the national interest. We provide high-end technical services, research and development, and prototype solutions to some of the country's most challenging technical problems. All Riverside Research opportunities require U.S. Citizenship.

Position Overview

Riverside Research is seeking an Information System Security Manager to administer several classified programs, to include Assessment & Authorization (A&A) requirements. This position functions as an ISSM, responsible for the development and oversight of a comprehensive information security program as identified in applicable customer requirements to include NISPOM, ICD 503/CNSSI 1253, DFARS, NIST 800-53, NIST 800-171, JSIG, etc.

Responsibilities

• Create and maintain A&A packages, System Security Plans (SSPs), Risk Assessment Reports (RARs), Security Controls Traceability Matrices (SCTMs) and Plans of Action & Milestones (POA&Ms) for assigned classified systems
• Establish and administer appropriate security systems, policies, standards, and procedures in compliance with applicable government and corporate directives, guidelines, and contractual obligations
• Conduct analysis and assessment of the security control assessment guidance, procedures, and templates, ensuring correct and uniform implementation of the new RMF based assessment processes
• Configure and validate information system compliance using DISA STIGs, SCAP Compliance Checker (SCC) and STIG Viewer
• Conduct regular audits/CM in accordance with government customer requirements
• Provide technical and professional leadership to support personnel, provide oversight for assigned classified system compliance and conduct self-assessments at multiple Riverside Research offices
• Provide CM for security-relevant information system software, hardware and firmware
• Investigate information system security violations and prepare reports with corrective actions and preventative measures.
• Make recommendations regarding tools, trend analysis and applicable network countermeasures
• Interfaces directly with DCSA or other DoD entities to conduct Information System security inspections, tests, and reviews
• Guarantee system security requirements are addressed during all phases of system life cycle
• Ensures system security assessments and audits are completed and documented
• Certify that all Information System authorization documentation is current and accessible to authorized individuals
• Supervisor assigned ISSO's

Qualifications

• Active Top Secret/SCI Security Clearance and the ability to obtain and maintain a polygraph
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Assurance, Business, or a related discipline.
• Twelve (12) years of progressively responsible experience in cybersecurity, information assurance, governance, risk, compliance, or related disciplines, including at least three (3) years of leadership experience managing technical teams or enterprise cybersecurity programs.
• Above Experience to consist of:
  • NIST 800-53 and Risk Management Framework (RMF) based accreditations
  • Working in a classified environment consisting of multiple Collateral, SCI and/or SAP systems
  • Managing multiple projects at one time that could have many tasks within each.
  • Working with Windows operating systems
  • Developing standard operating procedures and system security plans
  • Supervising and mentoring ISSO level team
• Certification Requirements: Current DoD 8570.1-M IAM Level 1
• Self-motivated and possess good written, verbal, listening and presentation skills
• Strong customer service, leadership and team building skills
• Organizational skills to include: attention to detail, time management, ability to multitask and prioritize.

Global Comp

$130,000 - $180,000 This represents the typical compensation range for this position based on experience, location and other factors.

Closing Statement

Riverside Research Institute is a not-for-profit, technology-oriented defense company, where service to our customers and support of our staff is our overall mission. Riverside is an affirmative action-equal opportunity employer and complies with all applicable federal, state, and local laws regarding recruitment and hiring. Riverside offers comprehensive compensation and benefit packages to our employees. Riverside bases its employment decisions solely on technical experience, qualifications and other job-related criteria related to our organizational purpose as a not-for-profit company, and without regard to race, color, religion, age, sex marital status, sexual orientation, national origin, physical or mental disability, veteran's status or any other status legally protected by applicable federal, state, and local law.