Information System Security Manager (ISSM)

Who We Are

Williams International is a privately-owned company that develops and manufactures jet engines for both military and commercial aircraft applications. We are a company of creators who deliver pioneering ideas and technologies that lead the aerospace industry. Our culture fosters creativity, collaboration, and continuous learning to position our team members to inspire each other and provide quality products and supporting services that exceed the expectations of our customers.

This position is 100% on-site. U.S. Citizenship is required.

The Opportunity

Williams International has an exciting opportunity for a Information System Security Manager (ISSM). The Information System Security Manager (ISSM) is responsible for establishing, managing, and maintaining an effective cybersecurity program for all information systems under their purview. Serving as the principal security advisor for assigned systems, the LCSCA ensures compliance with government, regulatory, and organizational requirements; oversees risk management, authorization, and continuous monitoring activities, and directs the operational security posture of classified information systems. This position requires close coordination with leadership, system stakeholders, auditors, and cybersecurity personnel to ensure secure system operation, timely response to vulnerabilities, and effective implementation of security controls.

Duties

• Develop, maintain, and oversee the system security program, policies, and procedures for assigned systems.
• Serve as the principal advisor on all matters - technical and otherwise - related to the security posture of assigned information systems.
• Ensure compliance with applicable cybersecurity requirements, including Risk Management Framework (RMF), DAAG, JSIG, and organizational directives.
• Coordinate development, review, and submission of system security artifacts (e.g., SSP, POAM, Policies and Procedures, etc.) and ensure documentation remains accurate and accessible.
• Monitor and assess system vulnerabilities, threats, and security incidents; ensure timely reporting, response, and corrective actions.
• Oversee implementation of assigned security controls and validate compliance throughout the system lifecycle.
• Maintain a working knowledge of system functions, security policies, and technical safeguards to ensure effective oversight of security operations.
• Coordinate periodic assessments, audits, inspections, and testing of information systems to evaluate security effectiveness and identify weaknesses.
• Manage, maintain, and execute continuous monitoring strategies and plans for assigned systems.
• Oversee configuration management policies and processes, ensuring any hardware/software changes are approved, tracked, and aligned with security requirements.
• Ensure ISSOs and System Administrators under their purview are appointed, trained, supervised, and operating in accordance with (IAW) cybersecurity policies and procedures.
• Coordinate authorization activities with the AO, SCA, and other stakeholders, ensuring systems are maintained IAW their Authorization to Operate (ATO).
• Ensure audit logs and monitoring outputs are collected, analyzed, and properly safeguarded.
• Maintain required cybersecurity certifications and ensure personnel receive adequate training and awareness resources.
• Oversee proper sanitization, release, and disposal of system components and media IAW approved procedures.
• Coordinate with security officials regarding external systems, interconnected systems, and guest systems requiring review or approval.
• Ensure appropriate responses and mitigation steps are taken when vulnerabilities, incidents, or non-compliance patterns are identified.
• Assess changes to systems, environments, or mission needs to determine impact on security posture or authorization status.
• Develop key performance metrics to track and ensure compliance with established policies and standards.
• Document and report control failures and gaps to stakeholders. Provide remediation guidance and prepare management reports to track remediation activities.
• Remain current on best practices and technological advancements and act as a technical resource for cybersecurity assessment and regulatory compliance.

Qualifications

• Bachelor’s Degree in a related field (i.e., Computer Science, Information Technology, Cybersecurity, etc.) and 2 - 3 years of related experience
• Possession of current Secret security clearance with SAP eligibility or the ability to obtain and maintain such
• Possession of certification in good standing to satisfy DoDM 8140.03 Intermediate Personnel Certification requirements (e.g., Security+, CISSP, CISM, etc.), or the ability to obtain such within six months of hire date
• Must possess a strong working knowledge of computer systems, system software, computer peripherals, and operating systems.
• Experience operating in secure environments (i.e., Restricted Areas, SAP SCIFs, etc.)
• Knowledge of specific DoD standards, RMF, DAAG processes, and JSIG directives.
• Prior experience managing RMF packages and implementing DoD policies: e.g., DAAG, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series
• Prior experience authoring and/or maintaining Body of Evidence (BOE) artifacts to support the A&A process as prescribed by the RMF.
• Experience with/working knowledge of security-relevant tools, systems, and applications in support of RMF to include: eMASS, NESSUS, ACAS, DISA STIGs/SCAP preferred
• Experience with/knowledge of CUI, DFARS 254.204-7012, NIST SP 800-171, and CMMC preferred
• High level of customer service, communication skills (oral and written), and attention to detail
• Willingness to learn and be adaptable with a “can do” attitude
• Strong interpersonal and communication skills; must be a self-starter with initiative to work independently and interact with all levels of internal personnel, government POCs, and customers
• Work individually and as part of a team in a diverse, rapidly changing environment
• Ability to work with limited direction and handle multiple projects on short timelines
• Proficient with Microsoft Office Suite (Outlook, Word, Excel, and PowerPoint).
• U.S. citizenship is required
• Position requires the ability to obtain a U.S. Government Security Clearance, if needed. Candidates selected may be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. For more information on Security Clearances, please visit: U.S. Department of State.

Additional Information

Williams International is a Drug Free Workplace where all new team members and contractors are subject to pre-employment drug testing for the following controlled substances: marijuana, cocaine, PCP, amphetamines, opioids and alcohol as policy dictates.

Williams International is committed to equal employment opportunities for all individuals regardless of race, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, and protected veteran status.

Please view Equal Employment Opportunity Posters provided by OFCCP here.

If you are interested in applying for employment with Williams International and need special assistance or an accommodation to use our website or to apply for a position due to a physical and/or mental disability, please send an e-mail with your request to HR@Williams-int.com. Or please call 248-624-5200. Determination on requests for reasonable accommodation is made on a case-by-case basis.