Senior ISSM — Classified Systems Security Lead

CFD Research Corporation

Beavercreek (OH)

On-site

USD 120,000 - 180,000

Full time

14 days+

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Benefits offered by this job

Employer matching 401(k)

Employee Stock Ownership Plan (ESOP)

Medical, vision, and dental insurance

Paid leave and disability coverage

Annual pay increases and performance-

bonuses

Job summary

CFD Research seeks an experienced Information System Security Manager to lead authorization and continuous monitoring of classified systems at our Beavercreek, OH facility. The ISSM will coordinate with government cybersecurity representatives and program security personnel to ensure compliance with NIST SP 800-53, DAAG, and RMF.

Ideal candidates will have 7+ years in cybersecurity/RMF, CISSP/CISM, and Top Secret clearance with SCI access preferred.

Qualifications

Bachelor’s degree in related field or equivalent combination of education and relevant experience.
CISSP, CISM, or equivalent advanced cybersecurity certification.
7+ years of progressively responsible cybersecurity, information-assurance, classified-system, or RMF experience.
3+ years of direct experience serving as an ISSM or ISSO.
Experience developing, managing, or maintaining authorization packages in eMASS.
Ability to evaluate Windows, Linux, standalone, peer-to-peer, client-server, and networked system environments.
U.S. Citizenship required; Top Secret clearance with SCI access preferred.

Responsibilities

Serve as the appointed ISSM for classified information systems.
Lead the development, submission, maintenance, and reauthorization of system authorization packages in eMASS.
Manage multiple systems and authorization efforts across collateral, SCI, SAP environments, as applicable.
Develop and maintain System Security Plans (SSP), security policies, procedures, control implementation statements, diagrams, inventories, risk assessments, and continuous-monitoring docs.
Coordinate with DCSA Information System Security Professionals, Authorizing Officials, government cybersecurity representatives, program security personnel, and customer system owners.
Interpret and implement requirements from 32 CFR Part 117, the DCSA DAAG, NIST SP 800-53, and related guidance.
Evaluate proposed system architectures, authorization boundaries, hardware, software, connections, data flows, and classification requirements.
Support development/approval of new classified systems (proposal, standalone, client-server, etc.).
Establish and manage configuration-control, change-management, vulnerability-management, audit, patching, and incident-response processes.
Ensure changes are reviewed, documented, approved, and maintained within the security posture.
Conduct periodic reviews, self-inspections, control assessments, vulnerability scans, and continuous-monitoring activities.
Coordinate with Facility Security Officer, program leadership, IT, physical security, personnel security, and insider-threat personnel.
Prepare systems/personnel for DCSA, customer, SAP, SCI inspections or assessments.
Identify deficiencies, communicate risk to leadership, and ensure corrective actions are completed.
Develop repeatable processes, templates, and governance standards for scalable classified-system portfolios.