IT Engineer,Security,Master

Overview

Keysight is on the forefront of technology innovation, delivering breakthroughs and trusted insights in electronic design, simulation, prototyping, test, manufacturing, and optimization. Our ~15,000 employees create world-class solutions in communications, 5G, automotive, energy, quantum, aerospace, defense, and semiconductor markets for customers in over 100 countries. Learn more about what we do. Our powerful, award-winning culture embraces a bold vision of where technology can take us and a passion for tackling challenging problems with industry-first solutions. Diversity, equity & inclusion are integral parts of our culture and drivers of innovation at Keysight. We believe that when people feel a sense of belonging, they can be more creative, innovative, and thrive at all points in their careers.

Responsibilities

Keysight is an industrial leader building instrument-testing hardware and software solutions and a publicly traded company (KEYS).  Approximately one quarter of Keysight’s revenue is generated from the Aerospace, Defense and Government Solutions (ADGS) sector.  The Keysight IT Governance, Risk, and Compliance (GRC) department looks for a motivated, experienced, and professional addition as the IT program manager to lead and manage security and compliance requirements imposed by any governments or their aerospace and defense contractors.    

Responsibilities:

• Offer assurance in the effectiveness of IT Governance, Risk Management, and Compliance (GRC) and internal control systems and build industry-recognized subject matter expertise in the dynamic and highly regulated government cybersecurity and compliance space.
• Effective strategist and liaison to build and maintain strong relationship with senior stakeholders of IT operation, ADGS, Legal, HR, Sales, and other cross-functional teams to proactively meet enterprise and product security and compliance regulatory requirements, close out inquiries imposed by ADGS customers, governments, and their contractors, and improve Cybersecurity and IT GRC maturity.  
• Leader working both independently and with team members and leveraging well-recognized cybersecurity and compliance assessment frameworks such as NIST 800-218, NIS2, NIST 800-53, NIST 800-171, NIST CSF, CMMC, CIS TOP 18, ISO 27001, and SOC2 Type II, to successfully execute defensible programs and projects involving Cybersecurity and IT Compliance requirements by any government and grow Keysight cybersecurity / compliance maturity and thereby ADGS business.
• Serve the role of Information Security and Compliance Manager (ISCM) for the Keysight International Traffic in Arms Regulations (ITAR) Program and manage associated responsibilities.
• Ensure government regulations and standards compliance related business objectives and goals are completed within defined timelines.  Monitor legislative and regulatory developments and design and implement response plans.
• Design and operate effective, pragmatic, measurable, and auditable IT controls, drive remediation to completion, and continuously improve Keysight internal control performance.
• Develop, document, track and report effective remediation plan for any identified audit issues, takes remediation to logical closure with auditors.
• Fine tune existing security policies to cover a broader spectrum of security and compliance requirements in existing environment.
• Regular review with management and communities on plans, progress, results, and roadblocks.
• Manage supporting contractors, project managers, and managed services providers.

Qualifications

Requirements:

• Excellent presentation, research, and writing capabilities required. Candidates must be able to independently produce complete, polished work products.
• 10+ years of cybersecurity, and IT GRC compliance experience required. Prior experience working as cybersecurity and/or compliance professional and program leaders in publicly traded companies, professional services firms, or US governments required.
• 5+ years of relevant experience leading IT compliance, IT Audit, IT governance, or IT risk management staffs and teams.
• Certifications, such as, but not limited to CISA, CISM required.
• Strong Knowledge of product security framework (e.g. NIST 800-218, NIS2) and government clouds (e.g. Azure Government Cloud, AWS GovCloud) preferred.
• Expert knowledge of Government regulations and standards (e.g. FedRAMP, NIST 800-218, NIS2, NIST 800-53, NIST 800-171, NIST CSF, CMMC)
• Expert knowledge in consultation and designing and presenting contents, metrics / KPIs, dashboards, and roadmaps required.
• Expert knowledge in Cybersecurity / IT compliance assessment, System Security Plans (SSP), and Plans of Actions and Milestones (POAM) required.
• Expert knowledge