Manager, Cyber Information System Security 1
At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.The Cyber Information Systems Security team is seeking a first level (Level 1) Cyber Information Systems Security Manager to lead a team of Information Systems Security Professionals in Clearfield, Utah. A diverse classified information systems security/information assurance background is required, including the Intelligence Community assessment and authorization process (ICD-503) and/or Special Access Programs (JSIG). The team performs the information systems security statement of work for classified programs and their systems and networks. This is achieved through passive evaluations such as compliance audits and active evaluations such as vulnerability assessments. Establishes strict program control processes to ensure mitigation of risks and support obtaining assessment and authorization of systems. Responsibilities include oversight and/or support of process, analysis, coordination, security certification test, security documentation, as well as investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits. As a working manager, you will be expected to provide direct program support and provides management oversight for the team. The role will ensure compliance and achieve and maintain formal authorizations from government agencies. Ensures the management/coordination with classified programs on the design, testing, and implementing of state-of-the-art secure operating systems, networks, database products, firewalls, and network architectures to meet government classified information system compliance requirements.The successful candidate will establish an inclusive culture within a diverse environment, and will be responsible for the following:
- Effective team management to include fostering individual development, performance management, open communication, financial management, and utilization
- Ensure strict program control processes to ensure mitigation of risks and support obtaining formal Assessment & Authorization of systems
- Assist in the implementation of the required government policy (i.e. DAAPM, JSIG, ICD-503). This may include project management.
- Support the formal Security Assessment process required by the company or government customer
- Regular and routine communication with key stakeholders including, program management teams, the Enterprise Services Program Management Office, the Information Technology Organization, Industrial Security, internal and external customers
- Master's degree with 3 years of Information Systems Security experience; OR a Bachelor's degree with 5 years Information Systems Security experience is required
- Must have work experience in the one (or more) of the following areas: Department of Defense Special Access Programs (DoD SAP), and / or Sensitive Compartmented Information (SCI) programs
- Must have a current DoD 8570 IAM Level II (or higher) security certification (examples: CAP, CASP, HCISPP, CISM, CISSP, GSLC, CCISO); OR must have the ability to obtain the certification within 6 months of start
- Must be wiling to work a rotating shift schedule
- Candidates must have a current DOD Secret level security clearance (at a minimum) to include on closed investigation date completed within the last 6 years OR must be enrolled in the DOD Continuous Evaluation Program (CEP), in order to be considered
- Must have the ability to obtain, and maintain, access to Special Access Programs as a condition of continued employment
- The ideal candidate will have a Master's degree in Cybersecurity, Information Security, or similar STEM related discipline, a DOD 8570 IAM level III certification, and 4 years of ISSO experience in a JSIG environment
- Prior leadership, or management, experience helpful
- Highly skilled utilizing the Risk Management Framework
- Diverse classified information systems security / information assurance background
- Excellent written and verbal communication skills
- Prior experience communicating with customer and program leadership
- Top Secret, or prior SAP/SAR access, is desirable