Screen reader users may encounter difficulty with this site. For assistance with applying, please contact hr-accessibleapplication@osu.edu . If you have questions while submitting an application, please review these frequently asked questions .
Current Employees and Students:
If you are currently employed or enrolled as a student at The Ohio State University, please l og in to Workday to use the internal application process.
Welcome to The Ohio State University's career site. We invite you to apply to positions of interest. In order to ensure your application is complete, you must complete the following:
Ensure you have all necessary documents available when starting the application process. You can review the additional job description section on postings for documents that may be required.
Prior to submitting your application, please review and update (if necessary) the information in your candidate profile as it will transfer to your application.
Job Title:
Information System Security Manager - ISSM
Department:
ERIK | Office of Secure Research
Position Overview
The Information System Security Manager (ISSM) plays a key role in the execution and oversight of Ohio State University’s National Security Program cybersecurity compliance, ensuring system integrity, classified data protection, and cryptographic security across national security and classified research initiatives. The position provides security program management and is responsible for supporting the development, implementation, accreditation, and continuous monitoring of information systems, as well as the management, control, accountability, and operational oversight of Communications Security (COMSEC) materials, cryptographic equipment, Controlled Cryptographic Items (CCI), and keying material. Compliance must be maintained under federal cybersecurity standards and national security directives, including the DoD Risk Management Framework (RMF), NIST SP 800-53, NIST SP 800-171, DoD CMMC, DAAPM, NISPOM, NSA COMSEC policies, and CNSSI directives. This position reports to the Sr. Facility Security Officer (Sr. FSO) within ERIK Research Integrity and collaborates with the Sr. FSO, Chief Information Security Officer (CISO), and institutional research leadership to maintain accredited operations.
Utilizing highly complex technical knowledge, this position oversees the end-to-end lifecycle of System Security Plans (SSPs), security control validation, vulnerability remediation, and the lifecycle management of cryptographic hardware such as TACLANE, KG-series, KIV devices, and secure phones. The ISSM performs system audits and vulnerability assessments using technical security tools—including Nessus/Tenable, Splunk, Security Content Automation Protocol (SCAP) Compliance Checker, and DISA STIGs—while maintaining accurate accounting records in government tracking databases such as eMASS and electronic key management systems (KMI/EKMS).
The ISSM serves as the primary contact for external security inspections, tests, command audits, and reviews conducted by oversight authorities (e.g., DCSA, Command Cyber Readiness Inspections). The position works closely with system owners, control assessors, Authorizing Officials, privileged users, and technical teams to enforce compliance policies, evaluate third-party RMF packages, investigate technical anomalies or COMSEC compromises, and maintain a robust security posture across operational systems.
Required Qualifications
Bachelor’s degree in Computer Science, Cyber Security, Engineering, Information Technology, Software Engineering or an equivalent combination of education and experience.
6 years of relevant experience.
U.S. Citizenship with an active national security clearance eligibility at the final Secret level or higher, or eligible to receive a clearance.
Minimum of 2 years of direct experience in information security roles managing DoD RMF, DAAPM, or NISPOM compliance frameworks.
Experience developing and maintaining RMF…