Information System Security Manager (ISSM)

GE Aerospace•Evendale, OH

2d•Onsite

About The Position

GE Aerospace in Evendale, Ohio is seeking an Information System Security Manager (ISSM) to support Department of Defense (DoD) activities. The ISSM is responsible for the overall cybersecurity posture, authorization, and continuous monitoring of classified information systems in accordance with applicable DoD, Intelligence Community, and Special Access Program (SAP) requirements, with specific emphasis on the Joint SAP Implementation Guide (JSIG). The ISSM provides leadership, governance, and strategic direction for the information system security program, ensuring all systems achieve and maintain accreditation while supporting mission objectives. GE Aerospace is a world-leading provider of jet engines, components, and integrated systems for commercial and military aircraft. At GE Aerospace, we are dedicated to pushing the boundaries of aviation technology to create a safer, more efficient, and sustainable future. Working here means being part of a team that values innovation, collaboration, and continuous improvement. Our cybersecurity team at the Evendale, OH site is committed to protecting our information systems and ensuring compliance with security policies. We foster a culture of inclusivity and innovation, where diverse perspectives are celebrated. We are committed to Diversity, Equity, Inclusion, and Belonging (DEIB) and offer comprehensive employee benefits, including health insurance, retirement plans, and professional development opportunities. This role provides leadership, governance, and strategic direction for the site’s classified information system security program, ensuring systems are securely engineered, authorized, and continuously maintained to support critical mission objectives. This is a primarily on-site position. You will be accountable for ensuring systems are operated, maintained, and decommissioned in accordance with approved security policies and procedures, as defined in the System Security Plan (SSP).

Requirements

U.S. citizen with an active Secret security clearance; ability to obtain and maintain Top Secret, SCI, and/or SAP access as required by the program.
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or related discipline, or equivalent professional experience.
Meets DoD 8570/8140 IAM Level III requirements (e.g., CISSP, CISM, GSLC, or equivalent), current or able to obtain prior to start date in accordance with contract/program requirements.
Minimum 7 years of relevant cybersecurity or information assurance experience supporting DoD or Intelligence Community systems, including at least 3 years in a lead, supervisory, or management role.
Demonstrated experience leading RMF-based authorization/accreditation efforts for complex, classified systems, including control selection/tailoring, assessment, POA&M management, and continuous monitoring.
Direct experience with JSIG-governed or SAP information systems, including collaboration with Government security stakeholders (e.g., AOs, PSOs, CPSOs, ISSMs/ISSOs).
Strong working knowledge of NIST SP 800-53 security controls, DoD cybersecurity policies, and secure architecture/engineering practices for classified environments.
Proven ability to lead cross-functional technical and security teams, manage multiple priorities in a dynamic environment, and clearly communicate risks, options, and recommendations to both technical staff and senior leadership.

Nice To Haves

Experience managing multiple networks and enclaves across varying classification levels, including standalone, closed-area, and enterprise-connected architectures.
Prior experience as an ISSM or senior ISSO responsible for JSIG-accredited systems or SAP enterprise environments.
Experience developing, standardizing, and implementing cybersecurity policies, standard operating procedures, playbooks, and metrics across a site or enterprise.
Familiarity with supporting technologies such as endpoint protection, host and network auditing, SIEM solutions, vulnerability management tools, and secure configuration baselines.
Demonstrated ability to influence stakeholders, drive closure of findings, and foster a strong security culture aligned with mission needs.

Responsibilities

Act as the primary cybersecurity lead for assigned classified systems, ensuring compliance with JSIG, RMF, and applicable DoD/IC/SAP directives.
Own and maintain all authorization artifacts (e.g., SSP, SCTM/SCM, POA&M, continuous monitoring plans, waivers/deviations) to obtain and sustain ATOs.
Lead and develop a team of ISSOs and security staff; set priorities, review work, and drive consistent, high-quality implementation of security controls.
Establish and mature site cybersecurity processes (configuration and vulnerability management, incident response, audit/log review, and access management).
Chair/participate in configuration and engineering review boards to assess security impact of changes and maintain alignment with JSIG/RMF requirements.
Coordinate and interface with government security representatives, SCAs, AOs, PSOs/CPSOs, program management, and other stakeholders on all cybersecurity matters.
Plan and execute internal self-inspections and readiness reviews; lead preparation and responses for customer/government inspections and assessments.
Ensure system baselines, inventories, network diagrams, and security documentation are accurate, current, and configuration controlled.
Provide role-based cybersecurity, JSIG, and SAP-related training and awareness to users, admins, and program staff.
Advise engineering and IT on secure architectures (segmentation, isolation, cross-domain and multi-level solutions, air-gapped designs) and modernization efforts.