ISSM: National Security & COMSEC RMF Lead

Ohio State University; Columbus (OH); Hybrid; USD 104,000 - 135,000; Full time

Job summary

Ohio State University seeks an Information System Security Manager (ISSM) to lead cybersecurity compliance across national security and classified research initiatives. You will oversee SSP lifecycle, vulnerability remediation, and COMSEC material management, coordinating with key leaders to maintain accredited operations.

The role requires DoD RMF expertise, NIST framework familiarity, and strong communication skills.

Qualifications

• Bachelor’s degree in Computer Science, Cyber Security, Engineering, IT, Software Engineering or equivalent.
• Minimum 6 years of relevant experience.
• U.S. Citizenship with active DoD clearance eligibility or higher.
• Experience developing RMF packages including SSPs, SCTMs, and POA&Ms.
• Familiarity with NIST SP 800-53/171 and RMF frameworks.
• Experience with eMASS, Nessus, Splunk, SCAP Checker, DISA STIGs, KMI/EKMS.
• Strong technical background in networking, OS, and privileged user management.
• Excellent verbal and written communication; ability to author SOPs and security policies.

Responsibilities

• Oversee the end-to-end lifecycle of System Security Plans (SSPs) and security control validation.
• Manage vulnerability remediation and continuous monitoring across information systems.
• Coordinate COMSEC materials, cryptographic equipment, and keying material.
• Serve as primary contact for external security inspections and audits.
• Collaborate with system owners and stakeholders to enforce RMF compliance.

Skills

RMF experience

NIST SP 800-53/171

Information security

DoD/COMSEC knowledge

Strong communication

Education

Bachelor’s degree in Computer Science

Bachelor’s degree in Cyber Security

Bachelor’s degree in Engineering/IT/Software Engineering or equivalent

Tools

eMASS

Nessus

Splunk

SCAP Compliance Checker

DISA STIGs

KMI/EKMS

Job description

Ohio State University seeks an Information System Security Manager (ISSM) to lead cybersecurity compliance across national security and classified research initiatives. You will oversee SSP lifecycle, vulnerability remediation, and COMSEC material management, coordinating with key leaders to maintain accredited operations.

The role requires DoD RMF expertise, NIST framework familiarity, and strong communication skills.