Information System Security Manager

TTM•Denver, CO

About The Position

The Information System Security Manager (ISSM) develops, implements, evaluates, and continuously improves the organization’s classified information system security program. The role manages assessment and authorization activities, maintains security documentation, verifies control effectiveness, and advises management on system security risks and resource needs. It provides accountable oversight of classified information systems, supports timely authorizations, and coordinates corrective actions across security, IT, and program teams. The ISSM works closely with the Facility Security Officer (FSO), Insider Threat Program Senior Official (ITPSO), system owners, and the assigned DCSA Information Systems Security Professional (ISSP). The position also administers Windows client systems and maintains their security and configuration records. It supports secure system maintenance, incident response, employee security awareness, and integration of security requirements into system development lifecycle processes. The role develops documentation for information system authorization and security management, including Authorization to Operate (ATO), System Security Plans (SSPs), and Plans of Actions and Milestones (POAMs). TTM Technologies describes itself as a global manufacturer of technology products, including mission systems, RF components and assemblies, and advanced printed circuit boards. The stated compensation range is $79,830–$133,051. An annual or quarterly company bonus may apply depending on position assignment. The company also describes health and well-being benefits, subject to position eligibility and plan terms.

Requirements

Must be a U.S. Person.
Must have an active SECRET security clearance or be able to obtain one.
Bachelor’s degree in information technology, cybersecurity, computer science, or a related discipline, or an equivalent combination of relevant training and professional experience.
At least five years of relevant IT or cybersecurity experience, including three years of hands-on Windows system administration and two years supporting security governance, control implementation, or assessment activities.
Must be a self-starter and able to operate independently without supervision.
Practical experience with secure configuration, vulnerability remediation, endpoint security, audit logging, backups, and controlled change management.
Excellent communication and leadership skills, with the ability to collaborate effectively with internal and external stakeholders.
Must comply with TTM Export Control Policies and Procedures and applicable laws, including ITAR, EAR, and OFAC requirements.

Nice To Haves

CISSP, CISM, Security+, or another relevant current certification.
Experience serving as an ISSM, ISSO, or security lead.
In-depth knowledge of information security standards, regulations, and NISP eMASS authorization processes, such as NIST SP 800-53, NISPOM, RMF, and DAAG.

Responsibilities

Develop and implement information security policies, procedures, continuous monitoring activities, and reports.
Lead the design, implementation, and maintenance of security controls that protect information systems and data.
Conduct regular security assessments and audits to identify vulnerabilities and recommend remediation measures.
Monitor security incidents and coordinate incident investigation and resolution activities.
Install, configure, maintain, troubleshoot, and retire Windows client systems; maintain accurate hardware, software, and configuration records.
Apply approved operating system and application patches, firmware updates, and secure configuration baselines.
Test changes, document rollback plans, and use controlled maintenance windows.
Collaborate with cross-functional teams to integrate security requirements into system development lifecycle processes.
Stay current with security technologies, trends, and threats to support proactive defense strategies.
Provide security awareness and role-based training and education to employees.
Report information security program status, key metrics, and improvements to management.
Develop documentation for authorization and security management of assigned information systems, such as ATOs, SSPs, and POAMs.
Coordinate corrective actions across security, IT, and program teams and work with the FSO, ITPSO, system owners, and assigned DCSA ISSP.

Benefits

Medical insurance
Dental insurance
Vision insurance
401(k)
Flexible spending and health savings accounts
Accident benefits
Life insurance
Disability benefits
Paid vacation
Paid holidays
Annual or quarterly company bonus may apply based on position assignment
Shift premium may be available for some alternative-shift positions, depending on assigned shift and location