Information Systems Security Manager (REF1616J)

Company Description

Elbit Systems of America is a leading provider of high-performance products, system solutions, and support services focusing on the defense, homeland security, commercial aviation, and medical instrumentation markets. With facilities throughout the United States, Elbit Systems of America is dedicated to supporting those who contribute daily to the safety and security of the United States. Elbit Systems of America, LLC is wholly owned by Elbit Systems Ltd. (NASDAQ: ESLT and TASE: ESLT), a global high technology company engaged in a wide range of programs for innovative defense and commercial applications. For additional information, visit: www.elbitsystems-us.com or follow us on Twitter.

Job Description

The Information Systems Security Manager is responsible for maintaining compliance with applicable security regulations and performing all security related duties as required at the assigned facility(ies). This entails the design and successful execution of an IT security program which exceeds customer expectations, and minimizes security risks. He or she must apply a comprehensive knowledge of information technology security principles, practices and procedures to develop, implement, and manage the overall information system security program to support the FSO of the facility. Ensures assigned Information Systems (IS) are properly managed, according to the32 CFR Part 117 the National Industrial Security Program Operating Manual (NISPOM) and other security directives as required.

• Establishes, documents, implements, and monitors the Information System (IS) Security Program and related procedures for the facility.
• Ensures Information System (IS) compliance in accordance with the Risk Management Framework (RMF), National Industrial Security Program Operating Manual (NISPOM) and the DCSA Assessment and Authorization Process manual (DAAPM).
• Ensure that other supported policies and procedures may be required for the certification and accreditation process which maybe mandated by the Customer or other U.S. Government agency.
• Ensures the development, documentation and presentation of IS security education, awareness and training activities for IS personnel, users, and others, as appropriate.
• Conduct self-inspections to ensure that the IS function is operating as accredited and that accreditation conditions have not changed.
• Ensures the development of facility procedures to govern marking, handling, controlling, removing, transporting, sanitizing, reusing, and destroying media and equipment containing classified information.
• Reports IS security incidents to the Facility Security Officer; assuring proper protection or corrective measures have been taken when an incident/vulnerability has been discovered.
• Implements security features for the detection of malicious code, viruses, and intruders (hackers), as appropriate or needed.
• Inform the Customer, U.S Government Defense Counterintelligence and Security Agency (DCSA), and FSO of security relevant changes to accredited information systems as required.
• Responsible for developing and maintaining an IS security audit and accountability program.
• If applicable, responsible for the oversight and continued training and education of Information System Security Officer(s) (ISSO).
• Ability to translate understanding of the organization's goals and objectives into compliance requirements.
• Provides quarterly updates and presentations regarding program status.
• Solid understanding of project management principles.
• Other assigned duties, as assigned by the CISO, related to security investigations.
• This position is at our Roanoke, VA location.
• Unique working conditions require primarily onsite work 
• May require international travel and passport: How much travel – < 25%

Qualifications

• BS in Computer Science or Information Security-Required
• 5-10 years experience in Functional, Management, and Industry

Certifications/Licenses: (DoD 8570.01-M IAM Level I/II certification)

Preferred certifications that meet the basic requirement for Information Assurance Manager (IAM) Level II, per DoD 8570.01-M, January 24, 2012:

• ISC2 Certified Authorization Professional (CAP)
• ISC2 Certified Information System Security Professional (CISSP (or Associate))
• ISACA Certified Information Security Manager (CISM)
• CompTIA Advanced Security Practitioner (CASP)
• GIAC Security Leadership (GSLC)

Knowledge, Skills, Abilities Required (Unique and Measurable):

• Expert knowledge of the Risk Management Framework (RMF), 32 CFR Part 117 National Industrial Security Program Operating Manual (NISPOM), and the DCSA Asses