Classified Information Systems Security Manager

Aurex • Huntsville, AL

7d • Onsite

About The Position

Aurex is seeking an experienced Information Systems Security Manager (ISSM) to lead the protection and compliance of classified information systems supporting our programs and facilities in Huntsville, Alabama. The ISSM will serve as Aurex's subject matter expert for classified information systems and processing environments, ensuring systems are operated and maintained in accordance with applicable U.S. Government regulations, contractual requirements, customer guidance, and company security policies. The ISSM will interpret, develop, implement, and enforce classified information systems security requirements while managing security activities throughout the system lifecycle. This includes system authorization and reauthorization, continuous monitoring, security assessments, audits, remediation, incident response, and system decommissioning. This position reports to the Vice President of Information Technology (VP of IT) and the applicable Program Manager and requires close coordination with Information Technology, Security, Program Management, system administrators, users, customers, and government security representatives.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline.
• Minimum of 8 years of experience administering classified information systems security.
• In-depth knowledge of Industrial Security and cybersecurity requirements associated with classified programs and information systems.
• Thorough knowledge of applicable security frameworks, regulations, and guidance, including NISPOM, DAAPM, NIST Special Publications, and other applicable U.S. Government cybersecurity requirements.
• Demonstrated knowledge of the Risk Management Framework (RMF) and U.S. Government information system authorization and accreditation processes.
• Experience implementing, assessing, documenting, and maintaining cybersecurity controls for classified information systems.
• Strong understanding of the principles and methods used to establish, operate, and maintain compliant classified information systems security programs.
• Working knowledge of Security Information and Event Management (SIEM) technologies and cybersecurity monitoring and assessment tools.
• Current applicable DoD 8140 Cyber Workforce qualification/certification appropriate for Information Assurance Management (IAM) Level II responsibilities, such as CISSP, CISM, Security+, or another applicable approved certification.
• Demonstrated ability to establish and maintain effective relationships with government security representatives, industry security professionals, program management, technical stakeholders, and internal customers.
• Proficiency with Microsoft Office applications and cybersecurity tools.
• Excellent written and verbal communication skills.
• Strong leadership, organizational, analytical, and problem-solving skills.
• Ability to independently manage multiple priorities and classified information systems in a deadline-driven environment.
• Must currently possess, or be eligible to obtain and maintain, the U.S. Government security clearance and accesses required for assigned classified programs and information systems.

Nice To Haves

• Experience supporting classified information systems and classified facilities.
• Experience supporting U.S. Government classified environments.

Responsibilities

• Serve as the primary Information Systems Security Manager and point of contact for classified networks and information systems within assigned Aurex programs and facilities.
• Advise the VP of IT and Program Manager on cybersecurity requirements, system security posture, identified risks, compliance issues, authorization status, and corrective actions.
• Implement and maintain required security controls for systems that process classified information.
• Manage information systems security throughout the system lifecycle, including initial authorization, reauthorization, continuous monitoring, security assessments, audits, decommissioning, and decertification.
• Ensure classified systems are operated and maintained in accordance with approved security documentation, authorization requirements, customer direction, and applicable U.S. Government security regulations.
• Organize, manage, and monitor security activities to ensure required program, assessment, and authorization milestones are achieved.
• Develop and track corrective action plans for identified security deficiencies and ensure remediation activities are completed within established timelines.
• Identify cybersecurity, compliance, schedule, and operational risks and communicate recommendations to appropriate company and program leadership.
• Conduct or support security investigations and prepare required incident reports and supporting documentation.
• Develop, coordinate, and conduct classified information systems security education, training, and awareness briefings.
• Maintain detailed records of information systems security activities and provide status reporting regarding classified systems, compliance activities, incidents, risks, and corrective actions.
• Support classified information processing requirements, secure facility accreditations, and applicable joint-use and co-use agreements with U.S. Government agencies.
• Coordinate system changes and security activities that may affect system authorization, accreditation, program operations, or customer requirements.
• Coordinate security activities across Information Technology, Cybersecurity, Program Management, Facility Security, and other applicable functional areas.
• Provide technical leadership, mentoring, and guidance to Information Systems Security personnel, system administrators, and other team members supporting classified environments.
• Provide technical input regarding staffing, training, certification, and resource requirements necessary to support classified information systems.
• Partner with U.S. Government agencies and customer organizations regarding inspections, assessments, authorization activities, investigations, incidents, and other reportable security matters.
• Support government security reviews, inspections, and audits and coordinate corrective actions resulting from findings or deficiencies.
• Represent Aurex on classified information systems security matters during customer meetings, technical exchanges, assessments, and authorization activities, as authorized by company and program leadership.

Benefits

• Comprehensive total rewards approach to compensation
• Competitive benefits package designed to support employees' health, well-being, and professional growth

What This Job Offers

• Job Type: Full-time
• Career Level: Manager