Information System Security Manager, SSC

Ascent Aerospace Inspiring the next generation of flight!

ABOUT US

Ascent Aerospace is a world renowned, single-source provider of production and automated assembly systems for the aerospace, defense, and space industries. As the largest tooling group, Ascent produces a full suite of both mold and assembly tooling required for the aerospace manufacturing market, including the largest invar molds ever made for aerospace. As an automation provider and production system integrator, Ascent work with customers to develop their project and see it through from process engineering, to build and installation to ensure it is an efficient and cost-effective solution.

SUMMARY OF POSITION

The Information Systems Security Manager (ISSM) is responsible for the security of the information systems at the facility and certifies to DSS that all security requirements are in place and the system is properly configured and protected.

ESSENTIAL FUNCTIONS

This document in no way states or implies that these are the only duties to be performed by the employee occupying the position.

• Manages and oversees the compliance and policy aspects for the company regarding Information Assurance for systems and networks that contact government information.
• Familiar with Defense Security Service (DSS) Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and Security Content Automation Protocol (SCAP) Tool
• Work closely with the Contract Program Security Officer (CPSO) and corporate leadership to ensure cyber and physical security standards are met.
• Serve as Information Systems Security Manager (ISSM) for classified computers in DoD and Intelligence Community computing environments.
• Oversees day-to-day security posture and continuous monitoring of IS including security event log review and analysis.
• Ensure system security measures comply with applicable government policies. Provide configuration management and accurately assess the impact of modifications and vulnerabilities for each system.
• Maintain thorough understanding of NIST 800-53 controls, and determine which controls are applicable to the application, as well as document implementation in Security Controls Tractability Matrix (SCTM).
• Reviews and performs technical inspections to identify and mitigate potential security weaknesses and ensure that all security features applied to a system are implemented and functional.
• Monitors and resolves Plan of Action and Milestones (POA&M) to mitigate system vulnerabilities on assigned Information Systems.
• Reviews and maintains security assessment and authorization documentation (e. g. , IA SOP, SSP, MSSP, RAR, SCTM)
• Any additional duties as reasonably assigned by management.

REQUIRED SKILLS, EDUCATION, AND EXPERIENCE

Any combination of education and experience providing the required skill and knowledge for successful job performance will be considered. Typical qualifications would be:

• High school diploma or GED.
• 2+ years of experience as an ISSM, including supervising at least one (1) Information System Security Officer (ISSO).
• Experience with classified computing environments in one or more of the following:
  ICD-705, DoDI's 8500. 01 & 8510. 01, NIST SP 800-53, and Risk Management Framework (RMF)
• Be able to secure systems using RMF framework and Security Technical Implementation Guides (STIGs) standards.
• Technical certification:
  CompTIA Security + CE, CASP, CISSP, or similar certification
• Must be able to respond to security instances that impact the facility's information systems.
• Possess technical skills to manage the systems under their authority.
• Must possess Department of Defense Secret Security Clearance and maintain security clearance for the duration of employment.
• Hold a Department of Defense 8570. 01 Certification of IAT Level II Security+ CE or equivalent or attain certification within 6 months of hire.
• This position must meet Export Control Compliance requirements, therefore a "US Person" as defined by 22. C. F. R. is required.

PREFERRED QUALIFICATIONS

• Bachelor's degree in information technology or related field
• Additional technical certifications:
  Microsoft, Cisco, CompTIA A+, Net+
• 3-5 years of experience in a desk side support role serving end users.
• 3-5 years of experience supporting Windows 10 desktop operating systems.
• 3-5 years of experience supporting Microsoft Office applications. Office 2016, 2019 etc.
• 3-5 years of experience using desktop imaging tools. (Windows Deployment Services, Acronis)
• 3-5 years of experience supporting enterprise Anti-Virus/Anti-Malware tools. (Agent Based tools, etc. )
• 3-5 years of experience supporting users with remote management tools.
• 3-5 years of experience supporting mobile devices. Apple/Android; MaaS360 MDM
• 3-5 years of experience supporting peripheral devices including wireless peripherals. Bar code scanners, printers, etc.
• Experience supporting CATIA.
• Experience supporting CNC machine controls.
• Experience supporting VeriSurf Laser tracking software.

SUPERVISORY RESPONSIBILITY

• Information System Security Officer

TRAVEL REQUIREMENTS

Mostly between Santa Ana, CA and Irvine, CA

WORKING CONDITIONS

Working conditions described here are representative of those that may be experienced by an employee daily while performing the functions of this job.

• Typically sits for extended periods at a computer workstation.
• May access and work in the manufacturing plant
• While performing the duties of this job, employee may be exposed to moving mechanical parts, fumes, and airborne particles.
• The employee may be exposed to vibration.
• The employee is occasionally exposed to caustic chemicals. The noise level in the work environment is usually moderate.
• May be required to travel to other site locations during the workday.
• May be required to work weekends to meet department and business demands.
• Work with safe manufacturing processes and understand that eyewear is mandatory in the manufacturing area.
• Knows that safety shoes are recommended in the manufacturing area.

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception and ability to adjust focus.

• Must be able to sit, climb, balance, stoop, kneel, crouch or crawl.
• Must be able to see, talk, hear, touch, feel and reach with hands and arms.
• Must be able to frequently walk and stand fo.