Senior Manager, Cybersecurity and IT Systems

Westinghouse Electric Company; Cranberry Township (Butler County); On-site; USD 179,000 - 206,000; Full time

Benefits offered by this job

Comprehensive medical benefits (HSA)

401(k) with company match

Paid vacations & holidays

Flexible work arrangements

Educational reimbursement

Job summary

Westinghouse Electric Company is seeking a Senior Manager, Cybersecurity & IT Systems. You will oversee governance, operations, risk, compliance and support for enterprise IT, and develop a compliant CUI environment including Maturity Model Level 2. The role reports to the COO, WGS, and is a 100% remote position.

Requirements include a Bachelor's in Information Systems, 10+ years of IT/security and a U.S. citizenship with the ability to obtain federal clearance. Travel about 20% is anticipated.

Qualifications

• Bachelor's degree in Information Systems or related field.
• 10+ years in IT/security, governance, risk and compliance roles.
• U.S. citizenship and ability to qualify for federal security clearance.

Responsibilities

• Oversee information systems and cybersecurity programs (governance, operations, risk and compliance).
• Establish compliant CUI environment and pursue Maturity Model Level 2 certification.
• Lead IT and Security teams and coordinate with MSP and external providers.
• Develop and maintain security controls, risk assessments and incident response.
• Ensure alignment with NIST 800-53/800-171 and other frameworks.
• Report to COO (WGS) and manage enterprise-wide IT architecture and compliance.

Skills

Leadership

Cybersecurity

Governance

Risk management

Compliance

Cloud architecture

NIST/ISO controls

CMMC/C3PAO

Education

Bachelor's degree in Information Systems

Master's degree preferred

Tools

NIST/CSF frameworks

ISO 27000

CMMC/C3PAO experience

Cloud platforms (AWS/Azure)

Job description

Are you interested in being part of an innovative team that supports Westinghouse's mission to provide clean energy solutions? At Westinghouse, we recognize that our employees are our most valuable asset and we seek to identify, attract and recruit the most qualified talent while recognizing and encouraging the value of diversity in the global workplace.

About the Role

As a Senior Manager, Cybersecurity & IT Systems you will oversee the leadership and execution of the Information Systems and Cybersecurity programs (Governance, Operations, Risk Management, Compliance and Support). You will establish a compliant CUI environment, including achieving and maintaining Cybersecurity Maturity Model Level 2 certification and developing a classified environment for new requirements. You will report to the COO, WGS and work remotely. 100% Remote role.

Key Responsibilities

• Establish overall systems architecture vision and ensure that specific components are designed, procured, installed and used.
• Responsible for company level compliance and architectural standards, guidelines, policies, frameworks, and reference models.
• Oversee all company-level IT architecture components (e.g., data architecture, application/software architecture, technical architecture).
• Establish a compliant protected information system (CUI) environment and develop a sustainable model for IT and Cybersecurity future function including company structure and relations with an external service provider.
• Oversee incident remediation activities to ensure compliance with WGS policies and security and nuclear industry best practices.
• Lead the IT and Security teams through the Cybersecurity Maturation Model Certification and C3PAO assessment including writing and reviewing WGS procedures and verifying and validating that the WGS process is within compliance.
• Oversee the Managed Service Provider (MSP) to ensure all company IT and cybersecurity requirements are met.
• Develop a framework for performing and overseeing the performance of IT risk assessments observing established company risk management policies for projects and of suppliers / vendors and within compliance requirements.
• Identify, recruit, develop Cybersecurity and IT staff and meet daily IT requests including installing for the WGS IT end-users.
• Oversee the development framework for performing technical vulnerability and penetration assessments.
• Maintain Main Risk Indicators, including metrics to ensure measurement of risk and threats.
• Conduct or oversee self-inspections and audits on WGS protected systems at least annually; document, track, and resolve corrective actions.
• Establish and oversee the process for capturing, assessing, decisioning, and reporting risks across the IT organization, both internally and coordinating with the overarching Westinghouse protocols.
• Oversee the development of the Security Controls Traceability Matrix (SCTM) to document implementation of applicable NIST 800-53 and 800-171 controls.
• Collaborate with the Security Team, Program Management, and MSP to address incidents, reportable events, and non-compliance findings, ensuring reporting to appropriate authorities and leadership.

Qualifications

• Bachelor's degree or equivalent experience. Degree in Information Systems, related technical discipline. Master's Degree preferred.
• 10+ Years of information technology or systems, security, governance, risk and compliance, IT Audit, or related work experience.
• We prefer CISA, CSAM, CISM CGEIT, CRISC, CISSP, or other applicable information security credentials.
• Experience leading cybersecurity projects, including assessing options and subsequent procurement/roll-out.
• Experience establishing main IT architecture standards, tools, best practices, and methodologies to meet our target state and help its architecture evolution and agreement across the organization.
• Experience in more than one technical information systems discipline (e.g. Networking, Cloud Technology, Applications Development).
• Experience designing solution roadmaps, and system and software architecture according to business strategies and solution architecture standards/processes.
• Experience leading a team towards CMMC certification or experience leading a team through cybersecurity compliance assessments and audits.
• Knowledge of cloud architecture, platform and software as a service architecture and products.
• Knowledge of security and control frameworks, such as ISO 27000, CobiT, NIST, COSO, NIST 800-171 and ITIL.
• The company requires US Citizenship and the ability to qualify for federal security clearance.
• 20% Travel expected.

We are committed to transparency and equity in all of our people practices. The base salary range for this position, which is dependent upon experience, qualifications and skills, is estimated to be $179,000 to $206,000 per year.

Benefits

• Comprehensive Medical benefits which could include medical, dental, vision, prescription coverage and Health Savings Account (HSA) with employer contributions options.
• Wellness Programs designed to support employees in maintaining their health and well-being including Employee Assistance Program providing support for our employees and their household members.
• 401(k) with Company Match Contributions to support employees' retirement.
• Paid Vacations and Company Holidays.
• Opportunities for Flexible Work Arrangements to promote work-life balance.
• Educational Reimbursement and Comprehensive Career Programs to help employees grow in their careers.
• Global Recognition and Service Programs to celebrate employee accomplishments and service.
• Employee Referral Program.

Westinghouse is an Equal Opportunity Employer including Veterans and Individuals with Disabilities.

#LI-Remote