Cyber Security Manager

Job Description
BAE Systems is looking for an experienced Cyber Security Manager to join our team supporting the NATO Seasparrow Project Office in Arlington, VA. The successful candidate will act as the Information System Security Manager (ISSM) responsible for the leadership, management, and execution of protecting NSPO not IT and classified systems. He/She will implement information assurance (IA) measures to mitigate vulnerabilities and maintain strict compliance. The incumbent acts as the NSPO’s representative (Sponsor) for the NSPO’s missile, combat system, associated test equipment and associated IT classified systems cyber security posture, ensuring all systems maintain a current Authorization to Operate (ATO) through the Risk Management Framework (RMF). Additionally, this role integrates technical cybersecurity leadership with budgetary execution to ensure the NSPO receives the appropriate level of support from US Navy Field Activities (FAs). This is a key position subject to customer approval, before onboarding.

Primary Duties and Responsibilities
1. ISSM for Non-IT & Classified Systems

• Serves as the primary point of contact for the organization's cybersecurity program reporting to key external organizations (e.g. DON/PAE CIO, DISA etc).
• Sponsor Representation: Acts as the NSPO ISSM for the NSPO’s missile and combat systems variants, associated test equipment and associated IT classified systems. Ensures these systems remain secure and that all modifications/upgrades align with the sponsor's intended purpose and security requirements.
• ATO Maintenance: Lead the effort to ensure all non-IT and classified systems have a valid, current Authority to Operate (ATO). This includes managing the RMF process, coordinating with the Authorizing Official (AO), and ensuring all security controls are implemented.
• Field Activity Coordination: Work closely with US Navy Field Activity (FA) experts to synchronize security requirements and ensure that technical implementations meet both Navy and NSPO standards.

2. Cyber Operations & Incident Response

• Incident Response Team (IRT): Serve as a core member of the NSPO Cyber Security Response Team. Lead or support the detection, containment, and recovery efforts during cyber incidents.
• Threat Mitigation: Act as the NSPO sponsor SME for security anomalies within non-IT and specialized classified IT systems and oversee implementation of remedial actions to mitigate vulnerabilities.
• Security Oversight: Oversee the installation of security software and the implementation of physical and technical controls for classified networks to protect the integrity and confidentiality of consortium data.