Cybersecurity, Senior Information Systems Security Manager
Role details
Job location
Tech stack
Requirements
- Demonstrated ability to create Assessment and Authorization (A&A) documents and procedures that resulted in an ATO
- Demonstrated ability to prepare for and support government inspections/assessments
- Be a cybersecurity Subject Matter Expert (SME)
- Experience with auditing (preferably Splunk) and certifying compliance (Nessus, SCAP, etc) of various systems (Windows, Linux, Network Devices and peripherals).
- Experience with the reviewing, creation, and remediation of mitigation reports from compliance and vulnerability scanning tools (Nessus, SCAP).
- Demonstrated ability to run and maintain the entire information assurance program for more complex efforts or areas
- Conducting all aspects of a self-inspection, Staff Assist Visits, etc.
- Implementation of Contingency and Incident Response Plan and subsequent experience with addressing cyber related investigations/incidents.
Required Education, Experience, & Skills
- An active Security Clearance and IAM Level III certification commensurate with DoD 8570.1M requirements
- Well-versed in Information System Security Management practices, particularly those related to on-premise cloud computing practices and governance.
- Be a Cybersecurity Subject Matter Expert (SME) and mentor for ISSMs and ISSOs.
- Knowledge of the Cybersecurity Maturity Model Certification (CMMC), a framework for assessing and improving an organization's cybersecurity posture
- familiar with the National Institute of Standards and Technology (NIST) Special Publication 800-171
- High level of personal motivation and initiative to learn and acquire new skills, and adapt seamlessly to an ever-changing security environment
- Customer focused, excellent communicator and ability to work with limited supervision.
- Strong organizational skills
- Strong background in information technology with a clear understanding of the challenges of cybersecurity
- Experience with overseeing accuracy and completion of Continuous Monitoring activities, self-inspections, corrective action plans, and Plan of Action and Milestones (POA&M)
Preferred Education, Experience, & Skills
- Top Secret Clearance, Bachelor's degree in related field
- Possess a strong understanding of key security standards and regulations, including the Defense Federal Acquisition Regulation Supplement (DFARS) clauses
- Working knowledge of system functions, security policies, technical security safeguards, and operational security measures.
- Knowledge/expertise with one or more of the following tools: Splunk, Nessus; SCAP, ACAS, SCC, other Security Information and Event Management (SIEM) Tools; Antivirus such as MacAfee; SIPR, eMASS and Xacta databases
- Translate operational requirements into technical requirements and architectures needed to meet program objectives
Benefits & conditions
Full-Time Salary Range: $132962 - $226035
Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.
Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.