Manager, Information Security

The Manager, Information Security is responsible for managing the development, implementation, and coordination of information security program efforts and related risk management activities across the company. Working with CxOs, Vice Presidents, Directors, and other stakeholders, the Manager of Information Security is responsible for establishing an appropriate information assurance strategy and vision. The Manager of Information Security oversees the creation and maintenance of information security related policy, information security risk assessment efforts, a threat intelligence program, and the security awareness and training program.

 

ESSENTIAL RESPONSIBILITIES

• Develop and implement information security policies, standards, and procedures.
• Oversee the day-to-day operations of the information security program.
• Conduct risk assessments and provide recommendations for mitigating potential threats.
• Manage the incident response process, ensuring timely and effective resolution of security incidents.
• Support and preparation for third party audits of systems, services, and processes.
• Develop and implement security awareness and training programs for employees.
• Foster strong partnerships with business units, technology teams, and other stakeholders.
• Manage security-related projects, including the implementation of security technologies.
• Represent the organization in security-related meetings and discussions.
• Serve as Information Systems Security Manager (ISSM) for Classified IT and related systems.
• Leads and implements the Assessment and Authorization (A&A) processes under the Risk Managed Framework (RMF) for new and existing classified information systems.
• Oversee participation and contribution to Defense Industrial Base (DIB) Cybersecurity Portal (DIBnet).
• Coordinate with Safety, Security, Facilities, and Human Resources to ensure proper physical and personnel security programs are properly implemented across all functional areas.
• Provide reports and presentations to senior management on the state of the information security program.
  
  

QUALIFICATIONS

• Current TS/SCI or ability to get one
• Experience building classified cybersecurity programs involving Secret, Top Secret, and TS/SCI
• Deep understanding of CMMC and upcoming compliance requirements
• Experience running Security Risk Assessments based on the NIST CSF
• Experience creating security programs around ITAR, DFARS, NIST 800-171 and 800-53
• Experience implementing Incident Response Plan and running table top exercises

 

EDUCATION & EXPERIENCE

• BS or applicable experience in lieu of degree

Special remarks regarding work environment, if applicable

• This position is located in Mojave, CA

 

• Manager ($157,000 - $206,000K): Bachelor’s degree or Master’s degree (preferred) in related discipline from an accredited institution and 10+ years relevant experience or equivalent combination of education and experience