Information Systems Security Manager (ISSM)

Location: Beavercreek, OH, USA

Work Location: onsite

• Coordinating with industry partners regarding digital infrastructure and cybersecurity requirements.
• Serving as the liaison between industry partners, Program Security Offices, and Authorizing Officials (AOs).
• Reviewing system specifications, technical documentation, and security architectures.
• Support Mission Risk Assessment Process – Cyber (MRAP-C) events
• Monitoring availability, serviceability, and recoverability of technology security systems.
• Reviewing cybersecurity policies, procedures, tools, and technical implementations.
• Evaluating system configurations and security controls.
• Reviewing installation and integration of system patches, updates, and enhancements.
• Ensuring rigorous application of information security and information assurance policies and practices.
• Evaluating risk assessments and providing recommendations for system, network, and application design, implementation, and operation.
• Evaluating vulnerability assessments and identifying deviations from approved configurations and security policies.
• Monitoring corrective actions resulting from audits, assessments, and inspections.
• Reviewing contractor and organizational Plans of Action and Milestones (POA&Ms).
• Meeting regularly with stakeholders to assess requirements and mission needs.
• Supporting certification, accreditation, and authorization activities through coordination of required documentation.
• Evaluating program control processes and recommending risk mitigation strategies.
• Reviewing periodic audits of systems and networks.
• Verifying implementation of required security policies, procedures, and technical controls.
• Applying project management principles to security-related efforts and initiatives.
• Coordinating communication of cybersecurity policies, procedures, vulnerabilities, and risk-assessment results.

• Support cybersecurity requirements for training simulators and mission planning systems.
• Coordinate accreditation activities for training systems and associated networks.
• Assess impacts of software updates and cybersecurity controls on training capabilities.
• Collaborate with training organizations to balance operational realism with security requirements.
• Manage cybersecurity posture of standalone and connected training systems.

• Ensure cybersecurity compliance of airborne and aviation-related information systems.
• Coordinate cyber security assessments.
• Review cybersecurity impacts for test equipment, mission systems, and data collection architectures.
• Support vulnerability management efforts associated with aviation platforms.
• Work closely with engineers, program offices, and operational stakeholders to maintain secure environments.

• Experience supporting airborne platforms or aviation-related systems.
• Knowledge of cybersecurity requirements and application of security controls within Platform Information Technology (PIT) systems.
• Familiarity with weapons system cybersecurity principles.

• Oversee cybersecurity compliance of enterprise and mission-support systems.
• Support secure integration of hardware, software, cloud, and network technologies.
• Review security architectures and technical solutions for ground systems.
• Coordinate vulnerability management and continuous monitoring activities.
• Manage cybersecurity documentation, inspections, and authorization activities for operational ground systems.

• Experience supporting enterprise IT, mission systems, or operational ground infrastructures.
• Knowledge of system administration and network security principles.
• Familiarity with RMF and continuous monitoring processes.

• 8+ years of related cybersecurity, information assurance, or information systems security experience.
• Experience in SAP, SCI, or other classified environments is highly desired.

• Bachelor's Degree or higher

• Bachelor's Degree required
• Master's Degree preferred

• Security+
• CISSP
• CASP+ CE
• CGRC
• CISM

• Risk Management Framework (RMF)
• NIST 800-53 Security Controls
• Vulnerability Management
• Security Audits and Assessments
• POA&M Management
• System Authorization & Accreditation
• SAP and SCI Environment Experience
• Strong Communication and Stakeholder Coordination Skills
• Program Security and Cybersecurity Compliance Expertise

• Active Top Secret (TS) clearance required; SCI eligibility required