Information System Security Manager at Westinghouse Electric Company, LLC

Cranberry Township, Pennsylvania, United States -

Full Time

Start Date

Immediate

Expiry Date

15 Mar, 26

Salary

129000.0

Posted On

15 Dec, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity, Risk Management Framework, Compliance, Information Systems Security, Vulnerability Analysis, Incident Response, Security Training, Audit Inspections, System Security Plan, Insider Threat Awareness, Configuration Management, Security Governance, Accreditation, User Access Management, Security Controls, Documentation

Industry

Utilities

Description

Are you interested in being part of an innovative team that supports Westinghouse’s mission to provide clean energy solutions? At Westinghouse, we recognize that our employees are our most valuable asset and we seek to identify, attract and recruit the most qualified talent while recognizing and encouraging the value of diversity in the global workplace. About the role: As an Information System Security Manager, you will oversee the cybersecurity oversight of protected information systems. These systems process, store, or transmit Classified or Controlled Unclassified Information (CUI) for the Westinghouse Government Services (WGS) team. Additionally, you will be responsible for authorization and compliance. You will report to the Westinghouse Government Services Facility Security Officer and be located at our Cranberry Township, PA location. 100% On-Site position. Key Responsibilities: Be the designated Information Systems Security Manager (ISSM) responsible for overseeing the security, accreditation, and compliance of all WGS protected information systems processing Classified or Controlled Unclassified Information (CUI). Establish and improve WGS's Information System Security Program, ensuring agreement on federal cybersecurity standards, corporate policies, and contractual requirements. Be the Responsible System Owner (RSO) for protected systems and maintain accountability for their security posture throughout their lifecycle. Develop, document, and maintain Risk Management Framework (RMF) and Assessment & Authorization (A&A) documentation Certify in writing to the Cognizant Security Agency (CSA) that we implement the System Security Plan (SSP). Additionally, certify that required controls are in place and tested, and that systems continue to operate as authorized. Ensure compliance with all applicable cybersecurity requirements. Conduct or oversee self-inspections and audits on WGS protected systems at least annually; document, track, and resolve corrective actions. Collaborate with the IT Department, External Service Provider (ESP), and Managed Service Provider (MSP) to provide cybersecurity governance and guidance. This ensures that technical operations align with approved configurations, security baselines, and accreditation requirements. Review and assess configuration changes and vulnerabilities with input from IT and network providers to determine security impact and obtain required approvals (FSO, IT, ESP) prior to implementation. Maintain the Security Controls Traceability Matrix (SCTM) to document implementation of applicable NIST 800-53 and 800-171 controls Integrate Insider Threat awareness and reporting requirements into the WGS information system security program with the Insider Threat Senior Program Official. Ensure that we provide all authorized users with security training and briefings prior to system access and that we maintain and validate user access lists regularly. Maintain daily awareness and monitoring of information systems through security event log reviews, vulnerability analysis, and audit trail inspections. Collaborate with the Corporate Facility Security Officer (FSO), Program Management, IT department and ESP to address incidents, reportable events, and non-compliance findings, ensuring reporting to appropriate authorities. Investigate and report security violations and incidents, coordinating with corporate security and government customers. Maintain working relationships with Program Management, corporate partners, government customers, and subcontractors to ensure security governance and communication. Respond to emergency situations and alarms to support operational continuity and security response. Maintain IAM Level III certification (CISM, CISSP or Associate, GSLC, or CCISO) under DoD 8570 baseline requirements. Respond to emergency situations and alarms. Perform other duties as assigned, in alignment with role qualifications, security needs, and operational requirements. Qualifications: Bachelor's degree in a related field, or four years of equivalent experience in addition to the experience outlined below. Five or more years of experience are required. This experience may be a combination of industry and U.S. military experience. It should include experience as an ISSM implementing various standards, such as 32 CFR 117, JAFAN 6/3, DCID 6/3, ICD 503, and/or JSIG IS requirements. Familiarity with vulnerability scans, ODAA Baseline Standard Requirements, and the Risk Management Framework (RMF). U.S. Citizenship and the ability to maintain national security eligibility required. One of the following certifications: CISM, CISSP (or Associate), GSLC, or CCISO (DoD 8750) preferred. We are committed to transparency and equity in all of our people practices. The base salary range for this position, which is dependent upon experience, qualifications and skills, is estimated to be $103,200 to $129,000 per year. #LI-Onsite Why Westinghouse? Our benefits package is tailored to meet the diverse needs of our employees, while also promoting wellness and career growth. The following are representative of what we offer: Comprehensive Medical benefits which could include medical, dental, vision, prescription coverage and Health Savings Account (HSA) with employer contributions options Wellness Programs designed to support employees in maintaining their health and well-being including Employee Assistance Program providing support for our employees and their household members 401(k) with Company Match Contributions to support employees' retirement Paid Vacations and Company Holidays Opportunities for Flexible Work Arrangements to promote work-life balance Educational Reimbursement and Comprehensive Career Programs to help employees grow in their careers Global Recognition and Service Programs to celebrate employee accomplishments and service Employee Referral Program Westinghouse Electric Company is the global nuclear energy industry's first choice for safe, clean, and efficient energy solutions. We enable our delivery of this vision by living our value system: Safety and Quality Integrity and Trust Customer Focus and Innovation Speed and Passion to Win Teamwork and Accountability While our Global Headquarters are located in Cranberry Township, PA, we have over 11,000 employees working at locations in 19 different countries. You can learn more by visiting http://www.westinghousenuclear.com. Westinghouse is an Equal Opportunity Employer including Veterans and Individuals with Disabilities Get connected with Westinghouse on social media: Twitter | Facebook | LinkedIn| YouTube

Responsibilities

The Information System Security Manager will oversee the cybersecurity of protected information systems and ensure compliance with federal cybersecurity standards. Responsibilities include developing security programs, conducting audits, and maintaining security documentation.