Qureos

Find The RightJob.

Information Systems Security Manager (ISSM)

Position: Information Systems Security Manager (ISSM)

Location: Central Virginia / Charlottesville, VA metro area (Madison, VA)

ARiA applies broad interdisciplinary expertise in acoustics, machine learning, modeling & simulation, and signal processing toward innovative science and engineering research and development for a diverse set of government and corporate clients. We are a 20-person firm where success is measured by the collective advancement of our research mission.

ARiA: Real Research. Real World.TM

For more information, visit www.ariacoustics.com.

Position Description:

As a high-impact, 20-person prime contractor, ARiA offers the technical autonomy of a startup with the mission-critical stability of a defense leader. You will have a "seat at the table" and direct influence over our security architecture, working in an environment where technical excellence is valued over bureaucracy.

ARiA is seeking a highly motivated, technically proficient ISSM to serve as a compliance architect and security partner for our research and engineering team. This is a high-agency role designed to build and maintain the compliant infrastructure that allows our scientists to innovate safely.

The ideal candidate views security as a foundational service that protects and enables the mission. We value collaborative governance—the ability to design security controls that are technically sound, evidence-based, and integrated seamlessly into the engineering workflow. Success in this role requires intellectual humility, a dedicated focus on mission velocity, and the ability to build consensus through technical expertise and transparent communication.

Responsibilities:

  • Dual-Track Compliance: Lead the accreditation and lifecycle management for both Classified Systems (NIST 800-53/RMF) and CUI/Unclassified Systems (NIST 800-171/CMMC)
  • Mission-Aligned Security: Partner with software engineers to implement NIST 800-53 and 800-171 controls as "guardrails" that ensure compliance without compromising research velocity
  • Transparent Documentation: Develop and maintain SSPs and related security policies and procedures, POA&Ms, and SPRS scores, ensuring all compliance artifacts are accurate and ready for audit by DCSA or DCMA
  • Collaborative Education: Lead security awareness initiatives that empower the team to own their security posture, treating security as a shared technical challenge
  • Peer-Level Accountability: Participate in the company's culture of open technical debate, where the "best idea wins" regardless of title or seniority

Requirements:

  • United States Citizenship and an active Secret security clearance
  • Bachelor’s degree in a technical field (CS, IT, Engineering) or equivalent hands-on experience
  • Proven ability to implement NIST SP 800-53 and NIST SP 800-171/CMMC in a Linux heavy R&D environment
  • Demonstrated receptivity to constructive feedback and a history of working collaboratively with cross-functional technical teams
  • IAM Level II certification (e.g., CAP, CASP+ CE, CISM, or CISSP) or the technical aptitude to obtain it within 6 months. ARiA provides support for this certification as part of a mutual commitment to your professional growth and the firm’s technical excellence
  • Strong proficiency in Linux system administration; ability to troubleshoot security-driven performance issues at the system level

Desirable Skills, Qualifications, and Experience:

  • Experience with automation (Ansible/Nix) to ensure "compliance as code"
  • Familiarity with eMASS, OBMS, and the SPRS reporting system
  • A history of streamlining security processes to improve engineering velocity
  • Prior ISSM or chief Information Security Officer (CISO) experience

Job Type: Full-time

Pay: $135,000.00 - $165,000.00 per year

Benefits:

  • 401(k)
  • 401(k) matching
  • Dental insurance
  • Employee assistance program
  • Flexible schedule
  • Health insurance
  • Health savings account
  • Life insurance
  • Paid time off
  • Parental leave
  • Relocation assistance

Application Question(s):

  • This position requires compliance with Federal drug laws, even if such substances are legal in your state. Will you comply with Federal drug laws?
  • Due to the nature of the information required to perform this job, U.S. Citizenship is required for this position. Are you a citizen of the United States?

Location:

  • Madison, VA 22727 (Preferred)

Ability to Commute:

  • Madison, VA 22727 (Required)

Work Location: In person

© 2026 Qureos. All rights reserved.