Cyber Security, Information Systems Security Manager (ISSM)

$112,420 - $191,070/Yr

BAE Systems - Burlington, MA

Full-time - Mid Level

Burlington, MA

10,001+ employees

Computer and Electronic Product Manufacturing

About the position

The Information Systems Security Manager (ISSM) at BAE Systems is responsible for overseeing the cybersecurity efforts related to information systems critical to national security. This role involves ensuring compliance with various security frameworks, managing system security documentation, and conducting continuous monitoring of security controls. The ISSM will work closely with other security disciplines and program personnel to maintain the integrity and security of classified systems, while also providing training and guidance to team members.

Responsibilities

• Support adherence to Risk Management Framework (RMF) compliance program as stipulated by NISPOM/DAAPM, JSIG, ICD 503, STIGs, and associated NIST publications.
• Obtain and maintain Authority to Operate (ATO) approvals for various systems by adhering to RMF.
• Develop and manage System Security documentation, Plans of Action and Milestones (POA&Ms), and assess and audit systems security controls.
• Conduct continuous monitoring of security controls in accordance with security authority requirements.
• Coordinate security-related activities with information security architects, senior information security officers, and program personnel.
• Provide oversight for all classified systems compliance and ensure execution of self-inspection programs.
• Ensure all security certification and accreditation documents for classified systems are up-to-date.
• Develop core documentation including System Security Plans, Standard Operating Procedures, and Remediation Plans.
• Review and create mitigation reports from compliance and vulnerability scanning tools.
• Conduct periodic and on-demand system audits and vulnerability assessments.

Requirements

• IAM Level II certification commensurate with DoD 8570.1M requirements.
• ISSM or relevant cybersecurity experience.
• High level of personal motivation and initiative to learn and acquire new skills.
• Customer-focused with excellent communication skills and ability to work with limited supervision.
• Strong organizational skills and ability to interface with other security disciplines.

Nice-to-haves

• Experience with conducting all aspects of a self-inspection.
• Knowledge of new and emerging information technology (IT) and cybersecurity technologies.
• Ability to function as an integral part of the development team.

Benefits

• 401(k)
• Dental insurance
• Disability insurance
• Employee assistance program
• Health savings account
• Paid holidays
• Paid military leave