GE Aerospace
Deputy Information Systems Security Manager (ISSM)
GE Aerospace, Cincinnati, Ohio, United States, 45208
Job Description Summary
As the Deputy Information Systems Security Manager (ISSM), for GE Edison Works you will support of DoD activities. You will be responsible for ensuring confidentiality, integrity, and availability of information systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement information systems security programs, policies, procedures, and tools. You will be expected to have a working knowledge of NIST information system protection policies and Risk Management Framework procedures and tools as prescribed within the DCSA Assessment & Authorization Process Manual (DAAPM), and as they apply to various defense industry implementations.
Job Description
Roles and responsibilities:
Strong working knowledge of the following policies and guidance; National Industrial Security Program Operating Manual (NISPOM), Joint SAP Implementation Guide (JSIG), ICD 503 and/or DCSA Assessment & Authorization Process Manual (DAAPM).
Validate & Assist the ISSM with Risk Management Framework (RMF) package(s) for Collateral Information Systems which include but not limited to: IT Concept of Operations (ConOps), Security Control Test Results, System Security Plan (SSP), Plan of Action & Milestones (POA&M), Continuous Monitoring (ConMon), and/or Standard Operating Procedures (SOP).
Serve as a liaison to the organization’s AOs, Information System Owners (ISO), Information Technology (IT) representatives, Physical Security (PHYSEC) and Information System Security Officers (ISSO).
Oversee and guide the development of RMF documentation needed to authorize collateral owned information systems. Select, validate, implement, and monitor unique security controls within various sites.
Ensure that RMF scheduled tasks are being completed to keep an inspection ready posture.
Assist ISSM with validating all Hardware requests and approve like systems and/or validate non-security relevant, foreign, or open-source software requests.
Attend scheduled meetings and report on current boundary/enclave security status as required to the ISSM.
Ability to balance regulatory compliance with the needs of the business.
Ability to identify security vulnerabilities in a broad spectrum of hardware and software products and provide risk mitigation solutions.
Create and/or enforce information security policies in accordance with the NISPOM, DAAPM and/or other security policies as required.
Validate or recommend cyber best practices to current and future lab efforts.
Enforce cyber supply chain risk management processes.
Respond to cyber incidents (breaches, data spills, etc.), assist in cyber investigations, report findings to the appropriate channels.
Minimum Qualifications:
Bachelor’s degree from accredited university or college with minimum of
5
years of professional experience OR associate's degree with minimum of 8 years of professional experience OR High School Diploma with minimum of
10
years of professional experience
Minimum 5 years of professional experience in Information Technology.
Note
: Military experience is equivalent to professional experience
Eligibility Requirement:
Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job.
Candidate must possess and maintain a minimum of a DoD Secret security clearance
Desired Characteristics:
IAM II or IAT II or higher certifications IAW DoD 8570.01-M
Attention to details
Strong oral and written communication skills
Strong interpersonal and leadership skills
Ability to influence others and lead small teams
Excellent time management, scheduling, and organizational skills
Lead initiatives of moderate scope and impact
Ability to coordinate several projects simultaneously
Effective problem identification and solution skills
Proven analytical and organizational ability
Note:
To comply with US immigration and other legal requirements, it is necessary to specify the minimum number of years' experience required for any role based within the USA. For roles outside of the USA, to ensure compliance with applicable legislation, the JDs should focus on the substantive level of experience required for the role and a minimum number of years should NOT be used.
GE offers a great work environment, professional development, challenging careers, and competitive compensation. GE is an Equal Opportunity Employer (https://www.eeoc.gov/sites/default/files/2022-10/22-088_EEOC_KnowYourRights_10_20.pdf) . Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.
GE will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).
Relocation Assistance Provided:
Yes
As the Deputy Information Systems Security Manager (ISSM), for GE Edison Works you will support of DoD activities. You will be responsible for ensuring confidentiality, integrity, and availability of information systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement information systems security programs, policies, procedures, and tools. You will be expected to have a working knowledge of NIST information system protection policies and Risk Management Framework procedures and tools as prescribed within the DCSA Assessment & Authorization Process Manual (DAAPM), and as they apply to various defense industry implementations.
Job Description
Roles and responsibilities:
Strong working knowledge of the following policies and guidance; National Industrial Security Program Operating Manual (NISPOM), Joint SAP Implementation Guide (JSIG), ICD 503 and/or DCSA Assessment & Authorization Process Manual (DAAPM).
Validate & Assist the ISSM with Risk Management Framework (RMF) package(s) for Collateral Information Systems which include but not limited to: IT Concept of Operations (ConOps), Security Control Test Results, System Security Plan (SSP), Plan of Action & Milestones (POA&M), Continuous Monitoring (ConMon), and/or Standard Operating Procedures (SOP).
Serve as a liaison to the organization’s AOs, Information System Owners (ISO), Information Technology (IT) representatives, Physical Security (PHYSEC) and Information System Security Officers (ISSO).
Oversee and guide the development of RMF documentation needed to authorize collateral owned information systems. Select, validate, implement, and monitor unique security controls within various sites.
Ensure that RMF scheduled tasks are being completed to keep an inspection ready posture.
Assist ISSM with validating all Hardware requests and approve like systems and/or validate non-security relevant, foreign, or open-source software requests.
Attend scheduled meetings and report on current boundary/enclave security status as required to the ISSM.
Ability to balance regulatory compliance with the needs of the business.
Ability to identify security vulnerabilities in a broad spectrum of hardware and software products and provide risk mitigation solutions.
Create and/or enforce information security policies in accordance with the NISPOM, DAAPM and/or other security policies as required.
Validate or recommend cyber best practices to current and future lab efforts.
Enforce cyber supply chain risk management processes.
Respond to cyber incidents (breaches, data spills, etc.), assist in cyber investigations, report findings to the appropriate channels.
Minimum Qualifications:
Bachelor’s degree from accredited university or college with minimum of
5
years of professional experience OR associate's degree with minimum of 8 years of professional experience OR High School Diploma with minimum of
10
years of professional experience
Minimum 5 years of professional experience in Information Technology.
Note
: Military experience is equivalent to professional experience
Eligibility Requirement:
Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job.
Candidate must possess and maintain a minimum of a DoD Secret security clearance
Desired Characteristics:
IAM II or IAT II or higher certifications IAW DoD 8570.01-M
Attention to details
Strong oral and written communication skills
Strong interpersonal and leadership skills
Ability to influence others and lead small teams
Excellent time management, scheduling, and organizational skills
Lead initiatives of moderate scope and impact
Ability to coordinate several projects simultaneously
Effective problem identification and solution skills
Proven analytical and organizational ability
Note:
To comply with US immigration and other legal requirements, it is necessary to specify the minimum number of years' experience required for any role based within the USA. For roles outside of the USA, to ensure compliance with applicable legislation, the JDs should focus on the substantive level of experience required for the role and a minimum number of years should NOT be used.
GE offers a great work environment, professional development, challenging careers, and competitive compensation. GE is an Equal Opportunity Employer (https://www.eeoc.gov/sites/default/files/2022-10/22-088_EEOC_KnowYourRights_10_20.pdf) . Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.
GE will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).
Relocation Assistance Provided:
Yes