Cybersecurity Site Lead, ISSM (Onsite)

Date Posted:

2024-11-07

Country:

United States of America

Location:

PW109: West Palm Beach 17900 Beeline Highway, West Palm Beach, FL, 33410 USA

Position Role Type:

Onsite

Pratt & Whitney is working to once again transform the future of flight—designing, building and servicing engines unlike any the world has ever seen. And because transformation begins from within, we’re seeking the people to drive it. So, calling all curious.

Come ready to explore and you’ll find a place where your talent takes flight—beyond the borders of title, a country or your comfort zone. Bring your passion and commitment and we’ll welcome you into a tight-knit team that takes our mission personally. Channel your drive to make a difference into shaping an organization and an industry that’s evolving fast to the future.

Innovation through diversity of thought. At Pratt & Whitney, we believe diversity of thought enables creativity, innovation, and a foundation for inclusion. By fostering an inclusive culture, we accept a shared accountability and responsibility to recognize, sponsor, coach, hire and promote talent equally. We welcome our employees to be their whole - best - selves at work because trust, respect and integrity, are a part of our DNA.

At Pratt & Whitney, the difference you make is on display every day. Just look up. Are you ready to go beyond?

What You Will Do:

The Information Systems Security Manager (ISSM) will lead and oversee a dedicated team responsible for delivering cybersecurity support at Pratt & Whitney's West Palm Beach (WPB) location. The person in this role is integral to a segment of the Military Engines (ME) program portfolio and will ensure adherence to the relevant U.S. Department of Defense (DoD) security regulations, laws, and policies. As the ISSM for the site, the candidate will collaborate closely with the WPB Facility Security Officer (FSO), Contractor Program Security Officers (CPSO), Program Security Officers (PSO), and Security Control Assessors (SCA) to secure approval for site-specific processes and procedures. Additionally, the candidate will coordinate with ISSMs from other Pratt & Whitney sites to manage local team assignments and to align site-specific operating conditions with company policies and procedures.

Primary Responsibilities:

• Manage and supervise a compact team of 2-4 cybersecurity experts tasked with supporting information systems, coordinating with Information System Security Managers (ISSMs) and Enclave Managers to ensure alignment.

• Coordinate with the host facility managing the Authorization to Operate (ATO) to guarantee compliance with their Wide Area Network (WAN) extension to this site, ensuring adherence to both organizational and regulatory standards.  Oversee the implementation of continuous monitoring activities as mandated by the Risk Management Framework (RMF) package. Confirm that all local cybersecurity processes and procedures are well-documented, authorized, and comply with the requirements of each Information System's (IS) RMF documentation. Maintain accurate and up-to-date hardware baselines for local Information Systems, ensuring meticulous inventory management and documentation.

• Engage in collaboration and strategic planning by liaising with program management to remain abreast of current and anticipated business needs, which facilitates strategic planning for future cybersecurity needs and initiatives. Monitor and potentially lead projects related to on-site classified information technology implementations or upgrades from a cybersecurity compliance standpoint, as directed by the Enclave Manager. Maintain close cooperation with the WPB Facility Security Officer (FSO) to ensure uniformity across all security disciplines.

• Work in conjunction with the ISSM and/or Senior Information Systems Security Officers (ISSOs) on the technical aspects of security architecture for projects that interface with Connecticut-based information systems.

• Actively seek opportunities to enhance processes and proactively assess them for improvement. Lead and/or participate in working groups tasked with establishing, reviewing, or revising standard procedures and work instructions.

• Provide coaching, mentoring, and training to Information Systems Security Officers (ISSO) on standard work, procedures, plans, and policies relevant to their respective information systems, following approved instructions, guidance, and requirements. Develop and/or refresh site-specific training materials and curricula in line with Enclave Managers' directives.

• Take charge of and execute tasks related to self-inspections and preparations for government compliance inspections that include remote site in