Staff Engineer - Cybersecurity

Fullsight; Warrendale (Allegheny County); On-site; USD 85,000 - 110,000; Full time

Job summary

Fullsight is seeking a qualified professional to support the operation of Industry Managed Programs and Certification programs with a focus on cybersecurity. You will conduct audit reviews, provide task group support, maintain auditor base, and produce technical reports.

This role requires a Bachelor’s degree, 3 years in cybersecurity specifications, knowledge of security standards, and strong communication skills.

Qualifications

• Bachelor's degree required.
• 3 years experience with Cybersecurity Specifications (preferred Aerospace Parts).
• Knowledge of cyber and data security standards (ISO/IEC 27001, ISO/IEC 27701, CMMC, ISO/SAE 21434).
• Strong data analysis and presentation skills.
• Able to travel up to 30%.

Responsibilities

• Conduct audit reviews with confidentiality and regulatory compliance.
• Support Task Groups and lead projects.
• Provide technical summaries to task groups and conduct auditor interviews.
• Coordinate with Auditor Staffing to manage capacity.
• Develop and manage budgets for assigned activities.
• Support ongoing development of PRI’s management system.
• Assist in other ad-hoc Task Group activities.

Skills

Auditing

Cybersecurity

Communication

Leadership

Project management

Microsoft Office

Education

Bachelor's Degree in relevant field

Tools

Microsoft Office

Job description

SAE Industry Technologies Consortia (ITC), Performance Review Institute (PRI) and SAE International (SAE), deliver shared solutions to industry's common challenges.

Join us and create a higher standard for a better world.

This position assists in the operation of the Industry Managed Programs and Certification programs having a focus on cybersecurity topics. This includes conducting audit reviews, providing task group support, maintaining auditor base, and other supporting functions.

Essential Functions

• Conduct audit reviews (achieve & maintain delegation) with strict confidentiality and compliance with procedural and regulatory requirements (35%)
• Task Group Support: (20%)
  • Manage/assist supporting a Task Group
  • Facilitate Task Group meetings and lead Task Group projects
  • Facilitate audit criteria development and revisions
  • Provide technical summary reports to the assigned task group
  • Conduct and participate in Auditor interviews and recruitment.
  • Identify and execute Auditor training
• Collaborate with Auditor Staffing to ensure sufficient capacity and manage assigned Auditors and Audit Reviewers (5%)
• Conduct audits as required upon approval as an auditor for the industry managed program and/or accredited standards. (5%)
• Maintain proficiency or gain knowledge for all assigned technology areas by attending classes and conferences, working with Subscribers/Suppliers (5%)
• Provide support needed to develop and manage budgets of assigned activities (5%)
• Provide support for the on-going technical development, implementation, and maintenance of PRI’s accredited management system. (5%)
• Support other ad-hoc Task Group activities such as: investigations initiated by the Ethics & Appeals Committee; presentation at symposia; etc. as required (5%)

Non-core Job Functions (20%)

• Lead/support small to medium PRI internal projects to support continuous improvement and PRI strategies.
• Serve as cybersecurity subject matter expert and advisor for joint projects between PRI and SAE subsidiaries.
• Company growth and development opportunities such as: Adapting an existing commodity to another Industry Managed Program (IMP); Developing a new technology within an existing commodity; non industry managed audit opportunities, etc.
• Personal growth and development opportunities such as: cross commodity/cross functional/cross program training; personnel qualification/certification; career development training courses; etc.

Minimum Requirements

• Bachelors Degree in relevant field required.
• 3 years experience working with Cybersecurity Specifications, preference to Aerospace Physical Parts experience.
• Working knowledge of microelectronics assembly environments or related.
• Working knowledge or relevant cyber and data security standards such as: ISO/IEC 27001, ISO/IEC 27701, CMMC, ISO/SAE 21434 or related.
• Working technical knowledge of appropriate science/engineering disciplines/methods.
• Proficient computer skills (Microsoft Office). Ability to make presentations and perform data pulls and analysis.
• Demonstrates a functional understanding of required job knowledge, procedures, and processes.
• Possesses English language oral and written communication skills.
• Demonstrates Leadership Potential. Facilitates team-oriented work processes through application of basic project management skills.
• Ability to effectively communicate particularly with Task Group Level Leaders.
• Builds and maintains successful working relationships with others.
• Recommend process improvements and identify gaps
• Sets priorities for the accomplishment of activities. Demonstrates the ability to effectively manage multiple concurrent tasks.
• Demonstrates evidence of the following skills:
  • Recognizing patterns and anomalies
  • Making use of previous knowledge
  • Researching productively
  • Formulating good questions
  • Using lateral thinking
  • Using divergent thinking
  • Hypothesizing
  • Exploring multiple viewpoints
  • Exploring, synthesizing, and refining multiple options
  • Generating and refining ideas
  • Inventing
• Demonstrates adaptability and embraces change.
• Presents oneself in a professional manner.
• Awareness of one’s own strengths and weaknesses. Demonstrates the ability to identify emotions and analyze reactions in others. Self-regulating and has control over emotions and impulses.

Preferred Qualifications

• 5 years experience in Quality Systems (e.g. ISO, AS 9100), preferred
• 5 years experience working with technical industry standards, preferred
• Auditing experience / knowledge of Quality Management Systems, preferred
• Experience in other technical areas covered by PRIs industry managed programs, preferred.

Working Conditions And Physical Requirements

• Ability to travel 30% of the time.
• Ability to work for long periods at a computer/desk.
• Standard office environment.

Periodically operate in an industrial environment which may include loud noises, fumes, high/low temperatures, indoor/outdoor settings, etc.

About The Organization

SAE Industry Technologies Consortia (SAE ITC) enables organizations to define and pilot best practices. SAE ITC industry stakeholders are able to work together to effectively solve common problems, achieve mutual benefit for industry, and create business value.

The Performance Review Institute (PRI) is the world leader in facilitating collaborative supply chain oversight programs, quality management systems approvals, and professional development in industries where safety and quality are shared values.

SAE International (SAEI) is a global organization serving the mobility sector, predominantly in the aerospace, automotive and commercial-vehicle industries, fostering innovation, and enabling engineering professionals. Since 1905, SAE has harnessed the collective wisdom of engineers around the world to create industry-enabling standards. Likewise, SAE members have advanced their knowledge and understanding of mobility engineering through our information resources, professional development, and networking.

Fullsight is a shared services group working across three affiliate organizations, SAE ITC, SAE International, and Performance Review Institute (PRI), uniformly delivering HR, IT, Legal, Customer Success, Finance, and Procurement services, which enables us to distribute resources across all parts of our businesses.

EEO CLAUSE

Fullsight provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.