Information Assurance Manager (Security Manager Information Assurance)

The Aerospace Corporation • El Segundo, CA

2d • Onsite

About The Position

The Information Assurance Manager (Security Manager Information Assurance) ensures security policies, standards, and procedures are implemented in alignment with Aerospace and Government customer requirements. The position supports Department of Defense (DoD) Collateral information systems and Aerospace and Government customers in a classified environment, and manages assets and Information Assurance staff. This role is full-time and on-site at the facility in El Segundo, California.

The manager serves as the primary Information System Security Manager (ISSM), leading Information System Security Officers (ISSOs) and coordinating the assessment and authorization of multiple systems. The role works with Government organizations and customers to obtain and maintain Authorization to Operate (ATO), support inspections, safeguard classified systems, and ensure personnel understand and follow applicable security requirements.

Requirements

• High school diploma with 10 or more years of experience, or a bachelor's degree with 5 or more years of experience.
• Ability to manage multiple assets simultaneously through the assessment and authorization (A&A) process to obtain Authorization to Operate (ATO).
• DoD 8570/8140 IAM Level II certification, such as CISSP, GSLC, or CISM, or ability to obtain it within 6 months of hire.
• Current Top Secret clearance; U.S. citizenship is required to obtain a security clearance.

Nice To Haves

• 8 or more years of relevant Information Security Management experience.
• Previous leadership experience in Information Assurance or cybersecurity.
• TS/SCI clearance eligibility.
• Experience with the assessment and authorization (A&A) process and obtaining ATO for multiple systems.
• Experience with NIST 800-53 control families and tests used to demonstrate that controls have been implemented properly.
• Understanding of Confidentiality, Integrity, and Availability and how CNNSI 1253 determines these for federal information systems.
• Experience with ICD-503 and other Intelligence Community directives or standards.
• Experience using compliance and vulnerability tools such as Assured Compliance Assessment Solution (ACAS) and Nessus.
• Experience with Information Assurance tools such as eMass, ArcSight, SNoW, and TALON.
• Understanding of Intelligence Community Vulnerability Alerts (ICVA) and Common Vulnerabilities and Exposures (CVE).

Responsibilities

• Serve as the primary Information System Security Manager (ISSM).
• Supervise a team of Information System Security Officers (ISSOs) supporting Collateral programs.
• Ensure appropriate Information Assurance staffing levels are maintained for internal and external customer needs.
• Coordinate technical assessments of managed assets.
• Advise Government organizations on Information Assurance practices, issues, and concerns.
• Obtain Government Authorizations to Operate through appropriate channels by creating and maintaining System Security Plans (SSPs) and related documentation for systems supporting multiple Government customers.
• Conduct weekly audit log reviews for inappropriate activity.
• Evaluate and analyze software and hardware intended for classified systems and obtain approval for their use through appropriate Government channels.
• Prepare for and assist with Government inspections.
• Document and execute test procedures.
• Ensure personnel understand and follow Government security policies, procedures, and standards.
• Monitor low-to-high and high-to-low data transfers performed by data transfer agents (DTAs) for compliance with Government regulations.
• Apply sanitization techniques to system components, memory, and media, and verify that IT personnel have implemented them properly.
• Translate complex Government regulations into technical and security solutions.
• Train and brief staff on Information Assurance for classified systems.
• Verify through appropriate channels that users have the required security clearances and need to know.
• Provide initial Information Assurance briefings and annual refresher briefings.
• Report security incidents, including classified messaging incidents, and assist with investigations as required.
• Ensure appropriate protection or corrective measures are taken following security incidents.
• Communicate regularly with Government and Aerospace customers regarding request status and facilitate completion of requests.

Benefits

• Comprehensive health care and wellness plans.
• Paid holidays, sick time, and vacation.
• Standard and alternate work schedules, including telework options.
• 401(k) plan with company-paid benefits of 8%, 10%, or 12% of eligible compensation based on years of service, plus matching contributions; employees are immediately eligible and vested upon hire.
• Flexible spending accounts.
• Variable pay program for exceptional contributions.
• Relocation assistance.
• Professional growth and development programs.
• Education assistance programs.
• Inclusive work environment built on teamwork, flexibility, and respect.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: High school or GED