Sr Systems Security Manager

As a Sr Systems Security Manager (SSM) and be responsible for defining, implementing, and maintaining information security policies. As an SSM you will serve as the principal advisor on all matters technical and otherwise involving information systems and security. You will provide oversight of the systems security team, leading projects, meeting deadlines, and making sure all business needs by SNC are met. You will also be pushing the boundaries of systems security by dealing with cutting edge technology at the forefront of our business enterprise.

The ISR (Intelligence, Surveillance & Reconnaissance), Aviation, and Security (IAS) business area is a leader in ISR and aviation, it is a leading prime manned and unmanned aircraft systems integrator for innovative, high-performance ISR and aviation systems. Its end-to-end Command, Control, Computers, Communications and Intelligence, Surveillance & Reconnaissance (C4ISR) capabilities encompass design, integration, test, certification, ground/flight training and complete logistics support. IAS tailors solutions to customer cost, performance, and schedule requirements and designs to consistently exceed expectations – with an unrivaled record of on time and on (or under) budget deliveries. https://www.sncorp.com/company/business-areas/

The Sr Systems Security Manager is responsible to design and deploy secure IT systems in support of various special programs. The Sr SSM’s primary focus will be working with skilled technicians to design and implement security controls in a newly minted development environment, assuring customer requirements and expectations are met, whilst remaining in compliance with appropriate USG & enterprise policies, procedures, and requirements. The Sr SSM manages a small team to design, implement and measure security controls across a multi-location network as well as coordinate and engage with other entities and stakeholders across the organization. The Sr SSM will brief leadership on progress, produce reports and manage “up and out” communication to ensure all parties are well-informed.

Responsibilities Include:

• Manage a team of highly skilled professionals, perform yearly performance reports and additional duties as needed. Provide technical guidance as needed by team members in support of information systems within the ISSMs responsibility
• Ability to manage multiple taskings as needed to ensure mission success and delegate to employees as needed based on skills and availability
• Serve as site Information Systems Security Manager (ISSM) and maintain security documentation for system hardware and software, to include SSP’s, POA&M’s, equipment specifications, practices and procedure
• Perform mandatory Information System (IS) audit of patching, updating, and scanning based on vulnerabilities and threats or regulatory compliance; maintain the day-to-day security posture and continuous monitoring for all systems
• Conduct risk assessment testing procedures for verification of Certification & Accreditation (C&A)/A&A/RMF safeguards to meet various regulatory requirements based upon RMF for DoD IT, ICD 503, DJSIG, JSIG & NIST guidelines
• Evaluate IS threats and vulnerabilities to determine whether additional safeguards are needed for a wide range of IS security related areas including architectures, firewalls, electronic data traffic, and network access
• Interpret government security classification guides (SCG) to determine classified system requirements and prepare written instructions to facilitate proper security implementation throughout the system lifecycle
• Collaborate with customers (internal and external) during the design and development process to employ best practices when implementing security requirements and controls
• Apply configuration Management (CM) policies and procedures for authorizing the use of hardware/software on an IS; participate in the Configuration Control Board (CCB) to ensure changes are NOT detrimental to system security
• Support Corporate Director of Security and Corporate ISSM in company-wide initiatives
• Coordinate with security managers (both corporate and local), Facility Security Officer (FSO) and Information Systems Security Engineers (ISSE) to define, implement and maintain information security policies, strategies, and procedures
• Implement policies and procedures for responding to security incidents, and for investigating and reporting security violations and incidents; assist the SNC IT cyber group with forensic investigations across the corporation
• Assess changes to an IS by performing periodic self-inspections, tests and reviews of the IS program to ensure that systems are operating as authorize