Information System Security Manager

SAAB; New York (NY); On-site; USD 112,000 - 147,000; Full time

Job summary

SAAB is looking for an Information System Security Manager to enhance information security across classified environments in East Syracuse, NY. The role involves developing security policies, managing compliance with standards, and overseeing cybersecurity activities. Candidates must hold a SECRET clearance and possess extensive experience in information assurance and risk management.

Benefits

Medical, vision and dental insurance

Paid time off including 3 weeks vacation

401(k) with immediate vesting

Tuition assistance

Employee stock purchase program

Qualifications

• Expert level in supporting DoD systems accreditation and risk mitigation.
• Must hold a current SECRET clearance.
• Excellent analytical skills and able to present results to stakeholders.

Responsibilities

• Oversees information assurance activities and compliance with security standards.
• Develops internal security policies and manages security architecture.
• Responds to cybersecurity incidents and conducts forensic investigations.

Skills

Risk Management Framework (RMF)

Security Audit Log Analysis

NIST 800-53 Security Controls

Cyber Compliance Assessment

Interpersonal Skills

Education

BA/BS degree in Information Assurance

MA/MS degree in Information Assurance

Job description

Saab is seeking an Information System Security Manager to join our team in East Syracuse, NY . This individual will oversee information assurance activities for Saab’s classified environments ensuring compliance with the National Industrial Security Program standards. The Information Security Manager will provide expert advice in evaluating and designing security solutions and implementing, maintaining and constantly improving the information security practice. The right individual should be well organized with the ability to work cross functionally in a fast-paced environment.

Key Responsibilities:

Development and maintenance of internal policies and procedures and incorporate industry best practices.

Develop and maintain all required RMF artifacts to include documentation and diagrams, security scans using approved Government scanning tools, and Plans of Action and Milestones (POA&Ms)

Resolving vulnerabilities identified during security scans, apply required patches and Security Technical Implementation Guides (STIGs), performing self-assessments, and support third-party SCA assessments.

Preparation of documentation to include Systems Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)

Planning, designing, and building security architectures that meet DoD/ISO/NIST/CMMC requirements in coordination with IT.

Managing requirements for network and computer security and ensures compliance with corporate cybersecurity policies and procedures.

Defining cybersecurity requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related network devices.

Responding immediately to cybersecurity-related incidents across multiple teams and providing a thorough post-event analysis. Investigate intrusion incidents and conduct forensic investigations.

Investigate security alerts to determine applicability to the environment.

Interfacing with various government/customer representatives

Participation in internal proposal efforts related to cybersecurity/IA requirements

Manage and update the Information Security Awareness program

Perform security assessments based on NIST and contractual requirements

Participate in selection and operation of security infrastructure including vulnerability management, SEIM solution, incident response tools, etc.

Compensation Range: $112,900-$146,800

#CJ

The compensation range provided is a general guideline. When extending an offer, Saab, Inc. considers factors including (but not limited to) the role and associated responsibilities, location, and market and business considerations, as well as the candidate's work experience, key skills, and education/training.

Skills and Experience:

Qualifications:

Expert level experience supporting DoD systems accreditation, certification, and authorization processes (e.g., RMF), to include assessing & mitigating risk in information systems; performing compliance auditing of information systems; developing and maintaining DoD information systems accreditation documentation; participating in configuration control board activities

Ability to present results/content to customers (internal or external) or other stakeholders.

Security audit log analysis

Experience assessing cyber compliance using DoD STIG Viewer and SCAP Tools

Experience with LDAP and Microsoft Active Directory

Experience implementing NIST 800-53 security controls.

Experience developing, applying, and assessing secure technical baselines for various applications and products (i.e., Windows OS, Linux OS, firewalls, switches, etc.)

Strong knowledge of RMF and its implementation as related to the Department of Defense (i.e. STIGs, ACAS, etc.)

Ability to plan/coordinate security and/or cybersecurity activities across multiple programs within the business

Ability to manage internal and external customer expectations; and provide presentations to executive leadership, government members, and external customers

Excellent interpersonal and analytical skills

Must hold a current SECRET clearance.

Education/Certifications:

BA/BS degree in information assurance or related discipline

15+ years of experience

Or

MA/MS degree in information assurance or related discipline

13+ years of experience

And

Skills & Abilities:

Advanced Knowledge & Application: Having wide-ranging experience, uses
professional concepts and company objectives to resolve complex issues in creative and effective ways. Understands professional concepts and how they can be applied to resolve complex issues and meet company objectives. Involved in development and implementation of new/ improved processes. May work on multiple complex projects and/or have staff lead responsibilities. May be
a project lead on multiple initiatives/projects.

Complexity & Judgment: Ability to analyze complex security situations and make strategic decisions based on detailed evaluations of data and risk factors. Drives the adoption of new design
and development approaches to
improve overall quality, reliability, and
speed of implementation. Capable of exercising independent judgment in selecting the appropriate methods and techniques for addressing multifaceted security issues. Works with internal or external
customers to define solutions.

Collaboration & Influence: Proven ability to network with key stakeholders outside of the security team and adapt communication style to persuade and advise others on security matters. Can lead cross-functional teams and interact effectively with various departments to achieve security objectives.

Independent Judgment & Accountability: Accountable for the implementation of security programs and their impact on the organization’s overall security function.

Must be a U.S. citizen. Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Drug-Free Workplaces:

Saab is a federal government contractor and adheres to policies and programs necessary for sustaining drug-free workplaces. As a condition of employment, candidates will be required to pass a pre-employment drug screen.

Saab provides an excellent working environment offering professional growth opportunities, competitive wages, work-life balance, business-casual atmosphere and comprehensive benefits:

Medical, vision and dental insurance for employees and dependents

Paid time off including: minimum of 3 weeks vacation, 5 floating holidays, 8 designated holidays, parental leave, personal illness, bereavement, jury duty, long-term and short-term disability

401(k) with immediate vesting on employer match

Tuition assistance

Student loan assistance

Wellness account, Care.com subscription and employee assistance programs

Employee stock purchase program with employer match

About Us:

Saab is a leading defense and security company with an enduring mission, to help nations keep their people and society safe. Empowered by its 19,000 talented people, Saab constantly pushes the boundaries of technology to create a safer, more sustainable and more equitable world. In the U.S., Saab delivers advanced technology and systems, supporting the U.S. Armed Forces and the Federal Aviation Administration, as well as international and commercial partners. Headquartered in Syracuse, New York, the company has business units and local employees in eight U.S. locations.

Saab is a company where we see diversity as an asset and offer unlimited opportunities for advancing in your career. We are also a company that respects each person’s needs and encourage employees to lead a balanced, rewarding life beyond work. Saab values diversity and is an Affirmative Action employer for protected veterans and individuals with disabilities. Saab is an Equal Employment Opportunity employer, all qualified individuals are encouraged to apply and will be considered for employment without regard to race, color, religion, national origin, sex (including pregnancy), sexual orientation, gender identity, age, veteran, disability status, or any other federal, state, or locally protected category.

Regardless of whether you value cutting edge technology, creativity or an innovative environment, everyone at Saab contributes to keeping people and society safe.