Information Systems Security Manager (ISSM)

Radiance Technologies, Inc.; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Radiance Technologies, Inc. is seeking an Information Systems Security Manager (ISSM) to oversee a portfolio of programs, scope information systems, and manage RMF packages and system authorizations.

You will maintain the security posture, perform monitoring, and coordinate with stakeholders to ensure compliance. The role requires a strong background in NIST 800-53, DAAG/JSIG policies, vulnerability assessments, and incident response, with the ability to operate within DAAG/JSIG environments.

Qualifications

• 7+ years of experience in information systems security/information assurance.
• Experience with RMF, ISA, Network Security Plans, and MOU/A.
• Active TS/SCI clearance.
• DoD 8570.1M compliant security certification (Security+, CISSP, or CISM).

Responsibilities

• Implement security controls per NIST 800-53 across programs.
• Develop and maintain RMF packages and authorization artifacts.
• Perform vulnerability assessments and continuous monitoring.
• Lead incident response and business continuity activities.
• Maintain authorization platforms (eMASS, Xacta) and documentation.

Skills

NIST 800-53

RMF

SIPRNet/JWICS

Incident response

Education

8570.1M compliant cert (Security+ / CISSP / CISM)

Tools

eMASS

Xacta

Splunk

Nessus

ACAS

SCC Tool

STIG Viewer

Wireshark

Job description

Radiance Technologies is an employee-owned company with a generous benefits package that is unmatched among our peers. Employee ownership, generous 401K, full heath / dental / life / vision insurance benefits, challenging assignments, educational reimbursement, competitive salaries and work environment combine to make Radiance Technologies a great place to work and succeed.

Radiance Technologies is searching for an Information Systems Security Manager (ISSM) that will be responsible for a portfolio of programs, supporting information system life cycle activities. The qualified candidate will scope information systems for new programs, prepare Risk Management Framework packages, maintain compliance throughout the system authorization period, and participate in program close-out and de-certification activities. Additionally, the candidate must maintain the day-to-day security posture through the change management and continuous monitoring process of the information system, which may include security event log analysis and end user account audits. Work hours are normal business hours, however, occasional support during non-business hours may be required.

Responsibilities:

• Responsible for having a strong understanding of the NIST 800-53 controls and ensure system security measures comply with applicable government policies such as the DAAG, JSIG, NIST, etc.
• Oversee and implement a configuration management process that accurately assesses the impact of modifications to the information system.
• Conduct and participate in vulnerability assessments and continuous monitoring activities for the information systems under their purview.
• Responsible for performing incident response and business continuity activities.
• Obtaining and maintaining access to authorization platforms such as eMASS, Xacta, etc. to effectively manage authorizations packages for information systems under their purview.
• Prepare and maintain security authorization documentation (e.g. SOP, SSP, RAR, SCTM, POA&M).
• Responsible for tracking assessment findings and developing mitigation plans.
• Maintain the information assurance posture for programs the includes the periodic review of technical to ensure all applied security features are implemented and functioning as intended.
• Maintains awareness of changes driven by internal and external customers and develops a security compliant plan that meets corporate needs.
• Ability to manage information systems in a SCIF and SAPF environment and support remote location operations.
• Responsibilities also include those outlined in the DAAG and JSIG.

Required Skills:

• Experience in implementing security controls of the operating systems to include Active Directory, Group Policies, and SROs.
• Experience or strong working knowledge of standing up and maintaining customer networks such as SIPRNet, JWICS, etc.
• Experience with various information system security compliance tools, such as Splunk, ELK, Wireshark, Snort, SCAP, SCC Tool, STIG Viewer, ACAS, Nessus, etc.
• Working knowledge of information system environments to include MUSA, LAN, WAN, etc. and its information system components (i.e. switches, routers, operating systems, software, etc.).
• Possess a DoD 8570.1M compliant information system certification (e.g. Security+, CISSP, CISM, etc.).

Required Experience:

• 7+ years of experience in information systems security/information assurance implementing NISPOM Chapter 8, NIST, DAAG, ICD 503, and/or JSIG IS requirements
• Experience with Risk Management Framework (RMF), Interconnected Security Agreements (ISA), Network Security Plans, and Memorandums of Understanding/Agreement (MOU/A).
• Active TS/SCI clearance

Behavioral Competencies:

• Great attitude with high degree of customer focus.
• Flexible and adaptable to changing priorities.
• Solid problem solver.
• Reliable and committed to getting the job done (including after hours as required).
• Excellent coping skills and the ability to juggle multiple priorities.
• Self-managed; able to work independently or with a team as well as the leadership skills necessary to lead a group of technical team members as required.
• Able to be objective and receive input from specialized team members according to their areas of expertise.

Radiance Technologies is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Employee-Ownership

Radiance is a proud employee-owned company! Employee-ownership benefits both our customers and workforce, and ensures that Radiance doesn’t have to answer to stockholders or be driven by quarterly earnings reports. Thus, Radiance will always prioritize enhancing our customer’s mission over expanding our bottom line. We are singularly focused on providing our customers with game-changing solutions to their most challenging requirements. This is only possible because employee-ownership attracts the highest quality employees, empowers them to identify capability enhancements, and provides them with the freedom to take risks to deliver high-quality solutions. Employee-ownership also provides tangible and long-term financial security for our people and their families. Therefore, employee-ownership embodies participation, empowerment, freedom, teaming, excellence, accountability, mission focus, and security.

Our Culture

Radiance’s culture is driven by our commitment to our customers and our employee-owners. Our employee-owners thrive on entrepreneurship, empowerment, and mutual responsibility for growth and sustainability. Our culture consists of individuals who embody technical and leadership skills to deliver superior solutions to the nation’s toughest technical challenges. We believe building trust and credibility with our customers leads to long‑term results. We invest in a superior technical workforce where leaders are developed, innovation is encouraged, and achievements are recognized. We seek innovative ways to improve, experiment, take risks, foster collaboration, and empower our employee-owners.

Our Values

Our values drive our culture, business model, and daily interactions. These values constantly remind us of who we are and what we do. Our employee-owners influence how we operate our business. We relentlessly pursue operating excellence by innovating, improving our processes, and reducing waste. We believe in being wise and ethical stewards of capital and resources. Our values dictate how we interact with each other and our customers, partners, and suppliers. Honesty, trust, humanity, alignment, and value creation require that we treat our employees with dignity and respect and provide them with fair compensation and equal employment opportunity. We believe in connecting with our communities and have a responsibility to be good corporate citizens, and we believe in sustainable business practices, which include supporting the environment and the communities in which we work.