Senior ISSM - DoD RMF & COMSEC Expert

Ohio State University; Columbus (OH); Ibrido; USD 104.000 - 135.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health coverage

Paid time off

Retirement plan

Descrizione del lavoro

The Information System Security Manager (ISSM) at The Ohio State University plays a key role in directing cybersecurity compliance for national security and classified research initiatives. The position manages RMF packages, SSPs, SCTMs, and POA&Ms, while coordinating with the CISO and ERIK leadership to uphold accreditation standards.

Responsibilities include end‑to‑end lifecycle management of SSPs, vulnerability remediation, and oversight of COMSEC materials and cryptographic hardware, with

Competenze

• U.S. Citizenship with an active final Secret level clearance eligibility or higher, or eligible for clearance.
• 6 years of relevant information security experience.
• Experience developing RMF packages (SSPs, SCTMs, POA&Ms).
• Familiarity with NIST SP 800-53/800-171.
• Experience with security tools and enterprise tracking databases like eMASS and Nessus.

Mansioni

• Oversee end‑to‑end lifecycle of System Security Plans (SSPs) and security controls.
• Perform system audits, vulnerability assessments and remediation.
• Manage communications security (COMSEC) materials and cryptographic equipment.

Conoscenze

Security clearance

RMF knowledge

NIST SP 800-53/171

Communicating risks

Formazione

Bachelor’s degree in Computer Science, Cyber Security, Engineering, IT, or related field

Strumenti

Nessus

Splunk

SCAP Compliance Checker

DISA STIGs

eMASS

KMI/EKMS

Descrizione del lavoro

The Information System Security Manager (ISSM) at The Ohio State University plays a key role in directing cybersecurity compliance for national security and classified research initiatives. The position manages RMF packages, SSPs, SCTMs, and POA&Ms, while coordinating with the CISO and ERIK leadership to uphold accreditation standards.

Responsibilities include end‑to‑end lifecycle management of SSPs, vulnerability remediation, and oversight of COMSEC materials and cryptographic hardware, with