ISSM - Classified Systems Security Lead

Applied Research Associates, Inc; Albuquerque (NM); On-site; USD 130,000 - 150,000; Full time

Job summary

Applied Research Associates, Inc. in Albuquerque, NM seeks an Information Systems Security Manager (ISSM) to implement and oversee the classified information system security program at a cleared facility.

The ISSM coordinates RMF activities, prepares SSPs and authorization packages, and ensures compliance with NISPOM, DAAG, NIST SP 800-53, CNSSI 1253, and CSA cybersecurity requirements. The ISSM advises on security matters, collaborates with ISSOs and IT staff, leads training, and manages RMF

Qualifications

• Security+ certification required.
• 5–7 years in information system security; 2+ years in ISSM/ISSO or equivalent.
• Experience with 32 CFR Part 117 §117.18, DAAG, and NIST SPs.
• Active Top Secret clearance with SCI eligibility (or higher).
• Strong knowledge of Windows and/or Linux security hardening; STIGs.

Responsibilities

• Implement and manage the classified information system security program per 32 CFR Part 117 and DAAG.
• Develop, maintain, and submit SSPs, security control assessments, and authorization packages.
• Manage RMF lifecycle for facility classified systems and eMASS workflows.
• Supervise site-level ISSOs and support staff performing NISP-related functions.
• Conduct regular security control assessments, continuous monitoring, and self-inspections.
• Lead incident reporting coordination with FSO and government agencies.
• Deliver annual role-based training for all users of classified systems.

Skills

Security+

RMF lifecycle

NIST SP 800-53

TS clearance w/ SCI

Windows/Linux hardening

Audit log management

A&A lifecycle

Education

Bachelor’s degree in cybersecurity/related field

Tools

eMASS (A&A tool)

SIEM/Auditing tools

STIG Viewer/SCAP

Vulnerability scanners

Job description

Applied Research Associates, Inc. in Albuquerque, NM seeks an Information Systems Security Manager (ISSM) to implement and oversee the classified information system security program at a cleared facility.

The ISSM coordinates RMF activities, prepares SSPs and authorization packages, and ensures compliance with NISPOM, DAAG, NIST SP 800-53, CNSSI 1253, and CSA cybersecurity requirements. The ISSM advises on security matters, collaborates with ISSOs and IT staff, leads training, and manages RMF