CUI Program Manager - Motion

ABB•New Berlin, WI

12h•Remote

About The Position

At ABB , we help industries run leaner and cleaner—and every person here makes that happen. You’ll be empowered to lead, supported to grow, and proud of the impact we create together. Join us and help run what runs the world. This position reports to: IS Manager Drives Business Line USA __ Your role and responsibilities: As a member of ABB Motion (MO) Business Area, directly reporting to Motion IS/IT management and indirectly reporting to ABB’s CUI Program Operations Manager, your role will oversee and lead the overall implementation and operational oversight of ABB’s Controlled Unclassified Information (CUI) Program for Motion. In this role, you will lead the implementation and operationalization of Motion’s CUI program including ownership of the Business Area System Security Plan (SSP), Plans of Actions and Milestones (POAMs), including related assets, processes, procedures, trainings and awareness, and utilization of ABB’s inherited enterprise controls in accordance with the applicable version of NIST SP 800-171, also obtaining and maintaining Motion’s Cybersecurity Maturity Model Certification (CMMC) certification for both Federal Contract Information (FCI) and CUI. Additionally, you will engage with the ABB’s CUI Program team, ABB’s U.S. Government Compliance team, and other functional teams to monitor proposed and pending regulations, governmental policies, and other agency actions related to information, data, and technology security affecting ABB’s infrastructure, products and solutions, and supply chains, and coordinate with ABB’s Motion business and functional groups to participate in rulemaking processes and implement business preparedness and implementation. The work model for the role is: Remote #LI-Remote You will be mainly accountable for: Lead Motion’s CUI compliance program implementation and operationalization through formulating, organizing, coordinating, directing and monitoring program activities as necessary to ensure compliance with US regulations such as 32 CFR Part 2002, 32 CFR Part 170, 48 CFR Part 204, pending proposed FAR Case 2017-016, and agency-specific laws, regulations and policies for the handling and safe-guarding of CUI. Collaborate and partner with business executives, leaders, functional stakeholders and organizations, to identify, develop and implement, inherited, common and business distinct solutions, including identifying, assigning, and performing oversight of key compliance roles including control owners and control performers, and ensuring individuals handle and safeguard CUI properly. Direct coordination and oversight of applicable CUI controls performance and provide direct mentoring and training as a deep domain subject matter expert and CUI process owner and domain lead for Motion. Provide periodic accurate and timely reporting status, of compliance posture metrics, schedule, and challenges and program needs including necessary re-sources and commitments to the Motion Business Area, Divisions, and Business Lines leadership, project stakeholders, and ABB’s CUI Program team. Maintain Motion documentation, including System Security Plan (SSP), Plans of Action and Milestones (PO&AMs), control implementation guidelines, processes, and procedures. Promote and foster a culture of integrity and compliance aligned with ABB's global integrity program and ABB's U.S. government contractor code of business ethics and conduct program.

Requirements

Bachelor’s degree with minimum eight (8) years demonstrated program/project management experience preferably in a large matrixed multi-business, multi-functional organization.
Candidates must already have a work authorization that would permit them to work for ABB in the US.

Nice To Haves

One or more of these certifications: Project Management Professional (PMP) certification, CMMC Certified Professional (CCP), CMMC Certified Assessor (CCA), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM).
Practical experience in the application and implementation of the NIST (National Institute of Technology) Risk Management Framework, and related publications including NIST Special Publications 800-171 and / or 800-53, as applicable to non-federal (private sector) organizations, and associated agency CUI-related laws, regulations, and governmental policies.
2 years CMMC program experience and/or implementing and maintaining a NIST SP 800-171 compliant environment.
Experience leading or directly supporting a DIBCAC High or Joint Surveillance NIST SP 800-171 and / or 800-53 assessment and experience teaching and demonstrating the application of NIST SP 800-171 controls to non-technical personnel.
U.S. Department of Defense approved 8570 - IAM/IAT Level III baseline certification with practical experience in the application and delivery of control systems or related solutions in an Interim Secure State (ISS).

Responsibilities

Lead Motion’s CUI compliance program implementation and operationalization through formulating, organizing, coordinating, directing and monitoring program activities as necessary to ensure compliance with US regulations such as 32 CFR Part 2002, 32 CFR Part 170, 48 CFR Part 204, pending proposed FAR Case 2017-016, and agency-specific laws, regulations and policies for the handling and safe-guarding of CUI.
Collaborate and partner with business executives, leaders, functional stakeholders and organizations, to identify, develop and implement, inherited, common and business distinct solutions, including identifying, assigning, and performing oversight of key compliance roles including control owners and control performers, and ensuring individuals handle and safeguard CUI properly.
Direct coordination and oversight of applicable CUI controls performance and provide direct mentoring and training as a deep domain subject matter expert and CUI process owner and domain lead for Motion.
Provide periodic accurate and timely reporting status, of compliance posture metrics, schedule, and challenges and program needs including necessary re-sources and commitments to the Motion Business Area, Divisions, and Business Lines leadership, project stakeholders, and ABB’s CUI Program team.
Maintain Motion documentation, including System Security Plan (SSP), Plans of Action and Milestones (PO&AMs), control implementation guidelines, processes, and procedures.
Promote and foster a culture of integrity and compliance aligned with ABB's global integrity program and ABB's U.S. government contractor code of business ethics and conduct program.

Benefits

Health, Life & Disability Choice between two medical plan options: A PPO plan called the Copay Plan OR a High Deductible Health Plan (with a Health Savings Account) called the High Deductible Plan.
Choice between two dental plan options: Core and Core Plus Vision benefit
Company paid life insurance (2X base pay)
Company paid AD&D (1X base pay)
Voluntary life and AD&D – 100% employee paid up to maximums
Short Term Disability – up to 26 weeks – Company paid
Long Term Disability – 60% of pay – Company paid. Ability to “buy-up” to 66 2/3% of pay.
Supplemental benefits – 100% employee paid (Accident insurance, hospital indemnity, critical illness, pet insurance
Parental Leave – up to 6 weeks
Employee Assistance Program
Health Advocate support resources for mental/behavioral health, general health navigation and virtual health, and infertility/adoption
Employee discount program
Retirement 401k Savings Plan with Company Contributions
Employee Stock Acquisition Plan (ESAP)
ABB provides 11 paid holidays.
Salaried exempt positions are provided vacation under a permissive time away policy.