Information Assurance Manager (Security Manager Information Assurance)

The Aerospace Corporation • El Segundo, CA

1d • $127,100 - $190,600 • Onsite

About The Position

The Information Assurance Manager (Security Manager Information Assurance) ensures security policies, standards, and procedures are implemented in alignment with Aerospace and Government customer requirements. The role supports Department of Defense (DoD) collateral information systems for Aerospace and Government customers in a classified environment and manages assets and Information Assurance staff.

The position serves as the primary Information System Security Manager (ISSM), supervises Information System Security Officers (ISSOs), and manages assessment and authorization activities to obtain government Authorization to Operate (ATO). It is a full-time, on-site position at the company’s facility in El Segundo, California, and requires a current Top Secret clearance. U.S. citizenship is required to obtain a security clearance.

Requirements

• High school diploma and 10 or more years of experience, or a bachelor’s degree and 5 or more years of experience.
• Ability to manage multiple assets simultaneously through the assessment and authorization (A&A) process to obtain Authorization to Operate (ATO).
• DoD 8570/8140 IAM Level II certification, such as CISSP, GSLC, or CISM, or ability to obtain it within six months of hire.
• Current Top Secret clearance; U.S. citizenship is required to obtain a security clearance.

Nice To Haves

• Eight or more years of relevant Information Security management experience.
• Previous leadership experience in Information Assurance or cybersecurity.
• TS/SCI clearance eligibility.
• Experience with the assessment and authorization process and obtaining ATOs for multiple systems.
• Experience with NIST 800-53 control families and the tests needed to demonstrate proper implementation; understanding of Confidentiality, Integrity, and Availability and how CNNSI 1253 determines these for federal information systems.
• Experience with ICD-503 and other Intelligence Community directives and standards.
• Experience using compliance and vulnerability tools such as Assured Compliance Assessment Solution (ACAS) and Nessus.
• Experience with Information Assurance tools such as eMass, ArcSight, SNoW, and TALON.
• Understanding of Intelligence Community Vulnerability Alerts (ICVA) and Common Vulnerabilities and Exposures (CVE).

Responsibilities

• Serve as the primary Information System Security Manager (ISSM).
• Supervise a team of Information System Security Officers (ISSOs) supporting collateral programs.
• Ensure appropriate Information Assurance staffing levels are met and maintained for internal and external customers.
• Coordinate technical assessments of managed assets.
• Advise government organizations on Information Assurance practices, issues, and concerns to support mission success.
• Obtain government Authorizations to Operate (ATOs) through appropriate government channels by creating and maintaining System Security Plans (SSPs) and related documentation for systems serving multiple government customers.
• Conduct weekly audit-log reviews to identify inappropriate activity.
• Evaluate and analyze software and hardware intended for classified systems.
• Obtain government approval for hardware and software used on classified systems.
• Prepare for and assist with government inspections; document and execute test procedures.
• Ensure personnel understand and follow Government security policies, procedures, and standards.
• Monitor low-to-high and high-to-low data transfers performed by data transfer agents (DTAs) for compliance with government regulations.
• Apply techniques to sanitize system components, memory, and media, and verify that IT personnel have implemented them properly.
• Translate complex Government regulations into technical and security solutions.
• Train and brief staff on Information Assurance for classified systems.
• Verify through appropriate channels that users have appropriate security clearances and need to know; provide initial Information Assurance briefings and annual refreshers.
• Report security incidents, including classified messaging incidents, and assist with investigations as required; ensure appropriate protections or corrective measures are taken.
• Communicate regularly with Government and Aerospace customers about request status and facilitate request completion.

Benefits

• Competitive compensation based on performance and the value brought to the business.
• Comprehensive health care and wellness plans.
• Paid holidays, sick time, and vacation.
• Standard and alternate work schedules, including telework options.
• 401(k) plan with company-paid contributions of 8%, 10%, or 12% of eligible compensation based on years of service, plus matching contributions; employees are immediately eligible and vested upon hire.
• Flexible spending accounts.
• Variable pay program for exceptional contributions.
• Relocation assistance.
• Professional growth and development programs.
• Education assistance programs.
• Inclusive work environment built on teamwork, flexibility, and respect.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: High school or GED