Senior ISSM – Classified Systems Security Lead (Top Secret)

CFD Research Corporation; Beavercreek (OH); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

401(k) match

ESOP

Medical, vision, dental

Paid leave and parental leave

Disability and life insurance

Job summary

CFD Research Corporation is seeking an experienced Information System Security Manager to lead the authorization, operation, and continuous monitoring of classified systems at the Beavercreek, OH facility. The role requires coordinating with government security officials and managing eMASS packages on-site.

The ideal candidate will possess a TS clearance, CISSP/CISM, and 7+ years in cybersecurity/RMF, with strong experience in SSPs, NIST guidance, and cross-agency coordination.

Qualifications

• Bachelor’s degree in related field, or an equivalent combination of education and relevant experience.
• CISSP, CISM, or equivalent advanced cybersecurity certification.
• 7+ years of progressively responsible cybersecurity, information-assurance, classified-system, or Risk Management Framework experience.
• 3+ years of direct experience serving as an ISSM or ISSO
• Demonstrated experience developing, managing, or maintaining authorization packages in eMASS.
• Ability to evaluate Windows, Linux, standalone, peer-to-peer, client-server, and networked system environments.
• Candidate must be a U.S. Citizen
• Active Top Secret clearance REQUIRED, with eligibility for SCI access highly preferred

Responsibilities

• Serve as the appointed ISSM for classified information systems.
• Lead the development, submission, maintenance, and reauthorization of system authorization packages in eMASS or other government-directed authorization platforms.
• Manage multiple systems and authorization efforts across collateral, SCI, SAP, and other customer security environments, as applicable.
• Develop and maintain System Security Plans (SSP), security policies, procedures, control implementation statements, diagrams, inventories, risk assessments, Plans of Action and Milestones, and continuous-monitoring documentation.
• Coordinate directly with DCSA Information System Security Professionals, Authorizing Officials, government cybersecurity representatives, program security personnel, and customer system owners.
• Interpret and implement requirements from 32 CFR Part 117, the DCSA DAAG, NIST SP 800-53, applicable Security Technical Implementation Guides, Committee on National Security Systems guidance, and customer-specific direction.
• Evaluate proposed system architectures, authorization boundaries, hardware, software, connections, data flows, and classified processing requirements.
• Support the development and approval of new classified systems, including proposal systems, standalone systems, peer-to-peer environments, client-server networks, and interconnected systems.
• Establish and manage configuration-control, change-management, vulnerability-management, audit, patching, account-management, media-protection, and incident-response processes.
• Ensure system changes are reviewed, documented, approved, and maintained within the authorized security posture.
• Conduct periodic reviews, self-inspections, control assessments, vulnerability scans, and continuous-monitoring activities.
• Coordinate classified-system requirements with the Facility Security Officer, program leadership, Information Technology, physical security, personnel security, and insider-threat personnel.
• Prepare systems and supporting personnel for DCSA, customer, SAP, SCI, and other government cybersecurity inspections or assessments.
• Identify program deficiencies, communicate risk to leadership, and ensure corrective actions are documented and completed.
• Develop repeatable processes, templates, and governance standards that can scale as the company’s classified-system portfolio grows.

Skills

CISSP

CISM

Risk Management Framework

Cybersecurity experience

Security clearance

Education

Bachelor's degree or equivalent

Job description

CFD Research Corporation is seeking an experienced Information System Security Manager to lead the authorization, operation, and continuous monitoring of classified systems at the Beavercreek, OH facility. The role requires coordinating with government security officials and managing eMASS packages on-site.

The ideal candidate will possess a TS clearance, CISSP/CISM, and 7+ years in cybersecurity/RMF, with strong experience in SSPs, NIST guidance, and cross-agency coordination.