Sr CUI Program Manager

OSI Systems•Richardson, TX

7d•$136,000 - $144,000

About The Position

Continental Electronics Corporation is a leading provider of RF technologies and innovative solutions with 80 years of proven performance. CEC has experienced significant recent growth and has established itself as the go-to supplier for a diversified product line supporting a wide spectrum of markets from commercial products, military customers, to space research laboratories. The Sr Controlled Unclassified Information (CUI) Program Manager leads the enterprise CUI protection program for Continental Electronics Corporation. This role is responsible for establishing and sustaining governance, controls, training, assessment readiness, and cross-functional execution to protect CUI, Covered Defense Information, Federal Contract Information (FCI), and controlled technical information handled in support of DoD contracts.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Business Administration, Security Management, Compliance, or a related field; equivalent DoD contractor experience may be considered
8 or more years of progressive experience in compliance, cybersecurity, information protection, government contracting, industrial security, defense program support, or security program management
Demonstrated experience leading enterprise-level compliance or security programs involving CUI, Covered Defense Information, Federal Contract Information, DoD contracts, or regulated government information
Strong working knowledge of DFARS cybersecurity clauses, NIST SP 800-171, CMMC requirements, CUI Registry concepts, DoD CUI policy, risk management practices, and federal acquisition requirements related to safeguarding information
Experience supporting System Security Plans, POA&Ms, control ownership, assessment evidence, audit responses, corrective action plans, training materials, executive briefings, and compliance documentation
Proven ability to lead cross-functional initiatives, influence stakeholders without direct authority, and drive remediation of complex compliance gaps across technical and non-technical environments
Excellent written and verbal communication skills, including the ability to translate DoD contractual, regulatory, and technical requirements into practical business guidance
Strong organizational, analytical, problem-solving, and program management skills with attention to detail and accountability for results
Ability to manage sensitive government and contractor information with discretion, sound judgment, and a high degree of professional integrity

Nice To Haves

Professional certifications such as CISSP, CISM, CISA, CRISC, Security+, PMP, Certified CMMC Professional, Certified CMMC Assessor, Registered Practitioner, or other relevant CMMC ecosystem credentials
Experience supporting defense, aerospace, intelligence community support, engineering, manufacturing, or other Defense Industrial Base environments
Experience preparing for or supporting CMMC Level 2 assessments, DIBCAC assessments, NIST SP 800-171 assessments, SPRS submissions, supplier compliance reviews, DCMA inquiries, or DoD customer security audits
Familiarity with System Security Plans, POA&Ms, control evidence repositories, secure enclaves, data loss prevention, identity and access management, encryption, incident response, records management, export control coordination, and secure collaboration platforms
Experience with subcontractor flow-down, supplier cybersecurity due diligence, prime contractor requirements, customer data rights expectations, and protection of controlled technical information
Prior experience briefing executives, DoD customers, contracting officers, auditors, assessors, security officials, or board-level stakeholders

Responsibilities

Develop, maintain, and mature the organization’s enterprise CUI program for DoD contract performance, including governance, policies, procedures, standards, workflows, reporting, and compliance roadmaps
Serve as the senior subject matter expert for CUI, Covered Defense Information, Federal Contract Information, controlled technical information, and related DoD safeguarding and dissemination requirements
Lead implementation and sustainment of CUI protection requirements across various DoD programs, contracts, information systems, enclaves, facilities, suppliers, and subcontractors
Coordinate alignment with applicable requirements, including 32 CFR Part 2002, DoD Instruction 5200.48, DFARS 252.204-7008, DFARS 252.204-7012, DFARS 252.204-7019, DFARS 252.204-7020, DFARS 252.204-7021, NIST SP 800-171, CMMC requirements, and customer-specific security direction
Review applicable CUI Security Class Guides (SCG) and work with Program Management to ensure requirements are met
Partner with Contracts, Information Technology, Supply Chain, Program Management, Engineering, Human Resources, and executive leadership to ensure CUI obligations are identified, flowed down, and operationalized
Oversee CUI scope definition, data flow mapping, system boundary identification, control ownership, System Security Plan coordination, Plan of Action and Milestones tracking, evidence collection, and assessment readiness activities
Coordinate with IT and Engineering stakeholders to support NIST SP 800-171 implementation, SPRS score maintenance, CMMC Level 2 readiness, DIBCAC assessment preparation, and customer audit response
Establish and monitor program metrics, risk indicators, corrective action plans, supplier compliance status, audit findings, POA&M closure, and executive-level reporting
Lead CUI training and awareness for employees, suppliers, and subcontractors handling DoD information.
Support cyber incident reporting coordination, potential CUI handling violation reviews, unauthorized disclosure response, customer notifications, and corrective actions in partnership with IT and Contracts.
Monitor changes in DoD policy, acquisition requirements, federal CUI requirements, CMMC implementation, NIST guidance, and customer expectations to ensure the program remains current, auditable, and defensible
Advise senior leadership on CUI risk, contract compliance posture, customer assessment readiness, resource needs, operational impacts, and strategic priorities across the Defense Industrial Base environment
Uphold the company’s core values of Integrity, Innovation, Accountability, and Teamwork
Demonstrate behavior consistent with the company’s Code of Ethics and Conduct
It is the responsibility of every employee to report to their manager or a member of senior management any quality problems or defects in order for corrective action to be implemented and to avoid recurrence of the problem
Duties may be modified or assigned at any time to meet the needs of the business

Benefits

Life at OSI
long-term incentives
potential discretionary bonuses
Employee Stock Purchase Program (ESPP)
comprehensive benefits including various options for health plans
access to 401(k) retirement plan
health savings account
disability insurance
life insurance
AD&D insurance
leave of absence programs
an array of voluntary benefits
paid time off is offered to be used for vacation, holidays, bereavement, and jury duty
flexible time-off