Skip to content
CFD Research Corporation

Information Systems Security Manager (ISSM)

Dayton, Ohio; Dayton, OHUnited States
Manager · Finance & IT
POSTED 10 AUGVERIFIED 1D AGO
Apply Ask
Role
91 days opentrue age
Posted 10 Aug
Pay
$158k–$239kno pay posted
Market p25–p75
$158k–$239k
United States · n=113 · 365d to 6 Nov
CompanyCFD Research Corporation →
52open roles
Opened · 30d
+0
Closed · 30d
−0
3d of snapshots · 30d window
Market
617open · Manager Security
Opened · 7d
+549% of open
All security
8,290open
All tracked boards · live 10 Nov · n=617
Visa
1H-1B LCAs · FY25
LCAs FY25 · n=1 · to 2025-03-14

About CFD Research: Since its inception in 1987, CFD Research has delivered innovative technology solutions within the Aerospace & Defense, Biomedical & Life Sciences, Intelligence & Sensing, and Energy & Materials industries. CFD Research has earned multiple national awards for successful application and commercialization of innovative component/system technology prototypes, multi-physics simulation software, multi-disciplinary analyses, and expert support services. Based in Huntsville, Alabama where laboratory facilities and headquarters are located, CFD Research also has office and laboratory facilities in Dayton, Ohio, prototyping test and evaluation facilities in Hollywood, Alabama, and office facilities in Fort Walton Beach, Florida. CFD Research is an ISO9001:AS9100D registered company and is appraised at CMMI Level II for Services. CFD Research is a 100% ESOP (employee-owned company) recognized in Inc. Magazine's Inc5000 as a top growing company for four of the last five years. Learn more at www.cfd-research.com

About the Role

CFD Research is seeking an experienced Information System Security Manager to lead and support the authorization, operation, and continuous monitoring of classified information systems at our Beavercreek, OH facility.

The ISSM will serve as a trusted security advisor responsible for ensuring classified systems are developed, authorized, maintained, and operated in accordance with the National Industrial Security Program Operating Manual, DCSA Assessment and Authorization Guide, Risk Management Framework, customer requirements, and applicable special-access security guidance.

The ideal candidate will have demonstrated experience managing multiple authorization packages across different government agencies, system architectures, classification levels, and mission environments. Experience supporting Special Access Programs is strongly preferred.

This position requires an individual who can work independently, coordinate effectively with technical and program personnel, and translate government cybersecurity requirements into practical, sustainable processes.

What You’ll Do

  • Serve as the appointed ISSM for classified information systems.
  • Lead the development, submission, maintenance, and reauthorization of system authorization packages in eMASS or other government-directed authorization platforms.
  • Manage multiple systems and authorization efforts across collateral, SCI, SAP, and other customer security environments, as applicable.
  • Develop and maintain System Security Plans (SSP), security policies, procedures, control implementation statements, diagrams, inventories, risk assessments, Plans of Action and Milestones, and continuous-monitoring documentation.
  • Coordinate directly with DCSA Information System Security Professionals, Authorizing Officials, government cybersecurity representatives, program security personnel, and customer system owners.
  • Interpret and implement requirements from 32 CFR Part 117, the DCSA DAAG, NIST SP 800-53, applicable Security Technical Implementation Guides, Committee on National Security Systems guidance, and customer-specific direction.
  • Evaluate proposed system architectures, authorization boundaries, hardware, software, connections, data flows, and classified processing requirements.
  • Support the development and approval of new classified systems, including proposal systems, standalone systems, peer-to-peer environments, client-server networks, and interconnected systems.
  • Establish and manage configuration-control, change-management, vulnerability-management, audit, patching, account-management, media-protection, and incident-response processes.
  • Ensure system changes are reviewed, documented, approved, and maintained within the authorized security posture.
  • Conduct periodic reviews, self-inspections, control assessments, vulnerability scans, and continuous-monitoring activities.
  • Coordinate classified-system requirements with the Facility Security Officer, program leadership, Information Technology, physical security, personnel security, and insider-threat personnel.
Source · CFD Research CorporationFirst seen 2 NovOriginal ↗