Information System Security Manager (ISSM)

Information Systems Security Manager (ISSM)

This is an ONSITE role located at our Anaheim Hills, CA location.

At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world's most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world.

Collins Aerospace is a leader in technologically advanced, intelligent solutions that help redefine the aerospace and defense industry. With a comprehensive portfolio and deep technical expertise, we help customers meet the demands of the global market. Join us and help shape the future of aerospace and defense.

Applied Signal Technology's (AST) Security organization is seeking an Information Systems Security Manager (ISSM) who strives for excellence and has a passion to be part of a team that strengthens our nation and improves the security of our world. AST provides trusted strategic and tactical SIGINT solutions that secure the interests of the U.S. and its partners. AST's work in areas such as high-capacity broadband communications, signal processing and analysis, tactical SIGINT, and wireless communications continually challenge our extraordinary engineers to resolve problems and make the world a safer place. AST's work environment is passionate, highly collaborative and provides engineers with the freedom to strengthen and expand their skills, explore new and creative ideas, and work closely with our nation's finest service members all while embracing integrity, innovation, and work-life balance.

As the site ISSM you will own the end-to-end Cybersecurity Program for all classified and controlled information systems at our Maryland Office facility. You will partner with Program Management, Engineering, and the Cognizant Security Agency (DCSA/SAPCO) to obtain and sustain ATO on schedule and keep our environment audit ready every day.

What You Will Do:

• Lead RMF/JSIG/DAAPM execution architect secure solutions, prepare authorization packages, brief Security Control Assessments, and drive POA&M closure.
• Own continuous monitoring vulnerability & patch management (ACAS/Nessus, SCAP, STIGs), log analysis (Splunk), account management, media control, incident response, and annual self-inspection.
• Shape early program decisions embed with PMO to define security requirements, supply secure-by-design input, and influence contract CDRLs.
• Develop people & process coach ISSOs/ISSEs, refine SOPs, track metrics, and present status to senior leadership and customers.
• Interface with external stakeholders act as the single voice to DCSA, SAPCO, and other Cognizant Security Agencies for all cybersecurity matters.
• Travel: Up to 5% (domestic)

Qualifications You Must Have

• Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM), information technology and a minimum of 5 years of prior relevant experience.
• Typically requires 5 years experience in DoD/IC Cybersecurity as ISSM or IAM-III equivalent (CISSP, CISM, GSLC).
• Proven delivery of ATO for SAP or SCI systems; prior Enterprise ISSM experience. Hands-on with SCAP, STIG Viewer, DISA SRGs, and SIEM/Vulnerability Tools, such as SPLUNK, NESSUS etc.
• Experience executing DISA STIG/SRG hardening across Linux and Windows.
• Active and transferable Top Secret SCI (TS/SCI) U.S. government issued security clearance is required prior to start date with the ability to obtain a polygraph after start.
• U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.

Qualifications We Prefer

• Masters in Cybersecurity, Computer Science, or related engineering field. CISSP-ISSEP / ISSMP or PMP.
• Hands-on with SCAP, STIG Viewer, DISA SRGs, and SIEM/Vulnerability Tools, such as SPLUNK, NESSUS etc.
• Proven leadership of multi-disciplinary teams and successful ATO delivery for SAP or SCI systems.
• Expert knowledge of NISPOM (32 CFR 117), JSIG, RMF (NIST 800-37/-53), ICD-503, and DAAPM, oversight/execution of A&A processes.
• Experience with DevSecOps pipelines, Zero Trust architecture, and Identity Access Management.
• Hands-on with ACAS, SCAP, STIG Viewer, DISA SRGs, and SIEM/Vulnerability Tools SPLUNK, NESSUS etc.

What We Offer

• Medical, dental, and vision insurance
• Three weeks of vacation for newly hired employees
• Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
• Tuition reimbursement program
• Student Loan Repayment Program
• Life insurance and disability coverage
• Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
• Birth, adoption, parental leave benefits
• Ovia Health, fertility, and family planning
• Adoption Assistance
• Autism Benefit
• Employee Assistance Plan, including up to 10 free counseling sessions
• Healthy You Incentives, wellness rewards program
• Doctor on Demand, virtual doctor visits
• Bright Horizons, child and elder care services
• Teladoc Medical Experts, second opinion program
• Eligible for relocation
• And More!