Cyber Security, Information Systems Security Manager (ISSM)

$112,420 - $191,070/Yr

BAE Systems - Merrimack, NH

Part-time - Senior

Merrimack, NH

10,001+ employees

Computer and Electronic Product Manufacturing

About the position

Jumpstart your career as a cybersecurity professional with BAE Systems, supporting and protecting information systems critical to national security at one of the leading companies in Aerospace and Defense. Develop your Information Assurance (IA) career through hands-on application, work with seasoned professionals, and a training and development plan designed to grow your skills in a fast-paced, team-based environment. If you are looking to learn, influence, and help develop top cyber technologies, applications, and processes that protect and service our customers wherever they may be air, land, and sea, come join our award-winning security family here at Electronic Systems (ES). In this role, you will be responsible for supporting adherence to all aspects of a rigorous Risk Management Framework (RMF) compliance program as stipulated by NISPOM/DAAPM, JSIG, ICD 503, STIGs, and associated NIST publications. You will obtain and maintain Authority to Operate (ATO) approvals for various systems by adhering to the Risk Management Framework (RMF). This position supports cybersecurity efforts throughout the RMF process for one or more assigned programs, including the development and management of System Security documentation, Plans of Action and Milestones (POA&Ms), assessing and auditing systems security controls, and continuous monitoring of controls. Due to the need for consistent, in-person collaboration and/or the requirement to perform all work onsite due to the nature of this particular role, it will be performed full-time on site. This means work will be conducted on location at a BAE Systems facility 100% of the time.

Responsibilities

• Support adherence to Risk Management Framework (RMF) compliance program.
• Obtain and maintain Authority to Operate (ATO) approvals for various systems.
• Develop and manage System Security documentation and Plans of Action and Milestones (POA&Ms).
• Assess and audit systems security controls and perform continuous monitoring of controls.
• Provide oversight for all classified systems compliance and execute a self-inspection program.
• Ensure all security certification and accreditation documents for classified systems are up-to-date.
• Coordinate security-related activities with information security architects and other security disciplines.
• Develop core documentation including System Security Plans and Configuration Management Plans.
• Conduct vulnerability assessments and audits of various systems.

Requirements

• IAM Level II certification commensurate with DoD 8570.1M requirements.
• ISSM or relevant cybersecurity experience.
• High level of personal motivation and initiative to learn and acquire new skills.
• Customer-focused with excellent communication skills.
• Strong organizational skills and ability to work with limited supervision.
• Experience with compliance and vulnerability scanning tools (Nessus, SCAP, ACAS, SCC).
• Experience with the development of System Security Plans and Standard Operating Procedures.

Nice-to-haves

• Run and maintain the entire information assurance program for complex efforts.
• Working knowledge of system functions and security policies.
• Experience with conducting self-inspections and system audits.
• Knowledge of new and emerging IT and cybersecurity technologies.

Benefits

• Health savings account
• Disability insurance
• Dental insurance
• 401(k)
• Paid time off
• Paid military leave
• Parental leave
• Employee assistance program
• Vision insurance
• Pet insurance