Information System Security Manager (ISSM) - Onsite

Date Posted:

2025-04-01

Country:

United States of America

Location:

PW100: East Hartford 400 Main Street, East Hartford, CT, 06118 USA

Position Role Type:

Onsite

Pratt & Whitney is working to once again transform the future of flight—designing, building and servicing engines unlike any the world has ever seen. And because transformation begins from within, we’re seeking the people to drive it. So, calling all curious.

Come ready to explore and you’ll find a place where your talent takes flight—beyond the borders of title, a country or your comfort zone. Bring your passion and commitment and we’ll welcome you into a tight-knit team that takes our mission personally. Channel your drive to make a difference into shaping an organization and an industry that’s evolving fast to the future.

At Pratt & Whitney, the difference you make is on display every day. Just look up.

Are you ready to go beyond?

What You Will Do:

The Information Systems Security Manager (ISSM) will be responsible for documenting, monitoring, and maintaining the overall cybersecurity posture of one or more information systems within the Military Engines (ME) portfolio of programs, ensuring compliance with applicable U.S. Department of Defense (DoD) security laws and regulations. The ISSM will actively participate in projects, offer guidance and support to internal customers, assist in developing and maintaining cross-security enclave processes and standards, and provide training and guidance on tools and techniques to other members of the cybersecurity team who report directly to the Programs Cybersecurity Enclave Manager.

Under the direction of the Enclave Senior Manager, the ISSM will serve as the information systems security lead for IT-related projects supporting the Military Engines portfolio of programs. The person in this role will develop and maintain the necessary plans, policies, and procedures for assigned information systems to obtain Authority To Operate (ATO) from the government under the Risk Management Framework (RMF).

• Lead and/or participate in working groups charged with establishing, reviewing and/or updating standard procedures and work instructions.

• Develop, assess, verify, and manage the implementation of information system security-related tools, measures, and controls in compliance with applicable DoD and Corporate policies, standards, and procedures.  Periodically review existing systems for opportunities to reduce effort, risk and/or mistake-proof methods and procedures through process improvement.

• Lead the effort in closing out POA&M items for Enclave information systems that are associated with technology-related control items. 

• Provide cybersecurity guidance and direction regarding all additions, changes and removals of hardware and software to/from assigned information systems. 

• Assist in overseeing and managing the patch management process and execution across all security enclaves.  Collaborate with peer ISSMs and Corporate equivalents for alignment and sharing of best practices.

• Ensure ISSOs monitor and audit assigned systems for compliance with current cyber security policies, concepts, and measures.  Perform all ISSO functions in their absence.

• In collaboration with the incident response manager, coordinate and/or perform incident response containment, eradication, and recovery tasks involving classified systems and/or spills of classified data to unauthorized systems.

• Support the respective security enclaves in information systems security-related inspection preparations as needed.

• Coach, mentor, and train ISSOs in standard work, procedures, plans, and policies applicable to the information system in accordance with IS-specific and Enclave-level instructions, guidance and requirements. Develop and/or update Enclave-level training content and curriculum as directed by the Enclave Manager.

• Partner with development teams and the US Government (USG) customer to ensure tasks are completed on schedule.

• Evaluate and monitor Commercial off the Shelf (COTS) and Government off the Shelf (GOTS) systems, applications, and services against system architectures, RMF requirements, and requirements.

• Audit security controls and provide technical direction and assistance with corrective or mitigation actions.

• Perform continuous monitoring tasks.

Qualifications You Must Have:

• Advanced degree and 5+ years of Technology, Information Systems or Cybersecurity experience; OR Bachelor’s degree and 8+ years of relevant industry experience; OR Associate’s degree (or 2-year technical training) an