Information Systems Security Manager

The Aerospace Corporation is the trusted partner to the nation’s space programs, solving the hardest problems and providing unmatched technical expertise. As the operator of a federally funded research and development center (FFRDC), we are broadly engaged across all aspects of space— delivering innovative solutions that span satellite, launch, ground, and cyber systems for defense, civil and commercial customers. When you join our team, you’ll be part of a special collection of problem solvers, thought leaders, and innovators. Join us and take your place in space.

At Aerospace, we are committed to providing an inclusive and diverse workplace for all employees to share in our common passion and aspiration – to carry out a mission much bigger than ourselves.

Job Summary

The primary function of the Information System Security Manager is to ensure security policies standards and procedures are implemented in a way that aligns with the Aerospace and Government customer requirements. This position is responsible for supporting Department of Defense (DoD) agencies and Intelligence Community (IC) customers.   This position will support Special Access Program (SAP), Sensitive Compartmented Information (SCI), and collateral activities. This position supports both Aerospace and Government customers within a classified environment and is responsible for managing assets and individuals.

Work Model

This position will be located 100% onsite in Colorado Springs, CO.

What You’ll Be Doing

• Functions as the primary Information System Security Manager (ISSM)
• Supervise a team of Information System Security Officers  (ISSOs) supporting SAP, SCI, and collateral programs for multiple customers.
• Ensure proper IA staffing levels are met and maintained to meet the needs of our government customers.
• Coordinates technical assessments with the primary government site Information System Security Manager (ISSM)
• Provides counsel to government organizations relative to information assurance practices issues and concerns ensuring continued mission success.
• Obtains government Authorization to Operate (ATOs) – through the appropriate government channels – by creating and maintaining System Security Plans (SSPs) and other related documentation per system for multiple government customers. Most SSPs are created within Xacta.
• Reviews develops and implements Standard Operating Procedures (SOP) for existing and future computer systems.
• Conducts weekly audit log reviews (using applications such as ArcSight) for inappropriate activity.
• Conducts hardware tracking using IA tools such as System Center Configuration Manager and Nessus.
• Conducts evaluation and analysis of software/hardware intended for use on the classified systems.
• Obtains approval (through the appropriate government channels) for hardware and software utilized on classified systems.
• Prepares for and assists with government inspections. Documents and executes test procedures.
• Ensures Government security policies procedures and standards are understood and followed by personnel.
• Provides guidance for classified media control in accordance with ICS 500-18 and insures media logs are properly maintained.
• Monitors low to high and high to low data transfers performed by data transfer agents (DTA) to ensure compliance with government regulations.
• Possesses the knowledge of techniques to sanitize system components memory and media – and to verify IT personnel has properly implemented.
• Understands complex Government regulations and translates them into necessary technical and security solutions.
• Trains and briefs staff on information assurance for classified systems. Verifies (through appropriate channels) users have appropriate security clearances and need to know. Provides initial IA briefing and annual refresher.
• Reviews records of end-user issues submitted to the appropriate classified help desk in accordance with government policies and practices.
• Reports security incidents (including classified messaging incidents) and assists with the resulting investigation as required. Ensures proper protection or corrective measures have been taken.
• Communicates regularly with Government (and Aerospace) customers for status of requests and facilitating the completion of requests.

What You Need to be Successful

Minimum Requirements:

• Eight (8) or more years of progressively more responsible experience in Information Assurance or other relevant field with a Bachelor’s Degree
• Must have previous leadership experience in Information Assurance/Cybersecurity
• Must communicate clearly and in a professional manner (verbal, written, presentations, etc.)
• Ability to simultaneously manage multiple asse