Cyber Security Manager / ISSM (Non-IT & Classified Systems)

Job Description

BAE Systems is looking for an experienced Cyber Security Manager to join our team supporting the NATO Seasparrow Project Office in Arlington, VA. The successful candidate will act as the Information System Security Manager (ISSM) responsible for the leadership, management, and execution of protecting NSPO not IT and classified systems. He/She will implement information assurance (IA) measures to mitigate vulnerabilities and maintain strict compliance. The incumbent acts as the NSPO s representative (Sponsor) for the NSPO s missile, combat system, associated test equipment and associated IT classified systems cyber security posture, ensuring all systems maintain a current Authorization to Operate (ATO) through the Risk Management Framework (RMF). Additionally, this role integrates technical cybersecurity leadership with budgetary execution to ensure the NSPO receives the appropriate level of support from US Navy Field Activities (FAs). This is a key position subject to customer approval, before onboarding.

Primary Duties and Responsibilities

1. ISSM for Non-IT & Classified Systems

• Serves as the primary point of contact for the organization's cybersecurity program reporting to key external organizations (e.g. DON/PAE CIO, DISA etc).

• Sponsor Representation: Acts as the NSPO ISSM for the NSPO s missile and combat systems variants, associated test equipment and associated IT classified systems. Ensures these systems remain secure and that all modifications/upgrades align with the sponsor's intended purpose and security requirements.

• ATO Maintenance: Lead the effort to ensure all non-IT and classified systems have a valid, current Authority to Operate (ATO). This includes managing the RMF process, coordinating with the Authorizing Official (AO), and ensuring all security controls are implemented.

• Field Activity Coordination: Work closely with US Navy Field Activity (FA) experts to synchronize security requirements and ensure that technical implementations meet both Navy and NSPO standards.

2. Cyber Operations & Incident Response

• Incident Response Team (IRT): Serve as a core member of the NSPO Cyber Security Response Team. Lead or support the detection, containment, and recovery efforts during cyber incidents.

• Threat Mitigation: Act as the NSPO sponsor SME for security anomalies within non-IT and specialized classified IT systems and oversee implementation of remedial actions to mitigate vulnerabilities.

• Security Oversight: Oversee the installation of security software and the implementation of physical and technical controls for classified networks to protect the integrity and confidentiality of consortium data.

• Conducts research of emerging security threats.

3. Budgetary Execution & Resource Management

• SEATASK Management: Manage and execute a variety of SEATASKs (Sustainment Engineering and Technical Assistance tasks) to secure and coordinate the required level of support from Navy FAs, through funding/scope packages.

• Financial Alignment: Apply an understanding of DoD budgeting and execution to ensure that cybersecurity requirements are properly funded and that deliverables from Field Activities are met.

• Resource Planning: Align technical security needs with the NSPO s financial cycle to ensure no lapse in security support or ATO validity.

4. Policy & Governance

• SME Leadership: Serve as the Subject Matter Expert (SME) for performing security and threat assessments across the program.

• Policy Development: Develop and implement comprehensive security policies that address the unique challenges of non-IT systems in an international consortium environment.

Required Education, Experience, & Skills

Education : Bachelor s degree in a technical or business field (Graduate degree preferred).

Clearance : Must possess a current DoD/DoW Secret Clearance with Tier 5 investigation.

Certification: Must meet or exceed DoD 8570.1 IAM Level III (e.g., CISSP, CISM).

Experience: >15 years of senior-level experience in cybersecurity management, specifically within a mixed DoD/International environment.

Preferred Education, Experience, & Skills

Specialized Knowledge:

• Proven experience managing Non-IT/Operational Technology (OT) security and RMF processes.

• Deep understanding of air gapped or IL6 equivalent cloud networks.

• Demonstrated experience in DoD budgeting and budget execution.

Pay Information

Full-Time Salary Range: $132962 - $226035

Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.

Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20 hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.

Cyber Security Manager / ISSM (Non-IT & Classified Systems)

131167BR

EEO Career Site Equal Opportunity Employer. Minorities . females . veterans . individuals with disabilities . sexual orientation . gender identity . gender expression