Job Details

Description

Summary:

The Cyber Security Program Analyst develops and manages the cybersecurity at Graham. This position identifies and mitigates cyber risks by creating a holistic framework. Job duties include policy and procedure creation and management, risk assessments, management on cyber security and education program, and creation of compliant CMMC, NIST 800-171, NN801-rev5 programs. This position drives overall risk down by developing a security operations plan built around best practices and frameworks.

Key Results Areas

CMMC/NIST 800-171/NNPI security lead
Lead compliance efforts for CUI and NNPI processing
Lead CMMC compliance and certification efforts
Lead NN-801-Rev5 compliance
Lead NIST 800-171 requirements
Manage internal and external audits and certifications
Update cyber scores in SPRS, Exostar or other government required systems
Cybersecurity Manager
Develop cyber education and training programs
Lead Cyber security projects and team members
Develop Cybersecurity policies, procedures, and processes
Create a robust incident response team and processes including the creation and execution or regular tabletop exercises
Manages all requirements for cyber reporting of incidents with the IT Manager
Recommends mitigations for insider threat risks
Develop and manage requirements around pen testing and other cyber threat testing
Determines and manages security software evaluations and implementations to support the cyber program
Validates security and configuration of third party software when needed
Defines and manages tools needed for E-discovery an computer forensic needs
Classified Systems
Management of security and requirements and RMF configurations of systems
Management of Documenting and submitting systems in E-Mass either directly or as advisor to other security staff
Management of Security Training program to support classified systems
Management of training and support of IT security staff for classified systems
Support the FSO as AFSO if needed
Reports incidents to DCSA, NCIS, FBI and others as needed
Leads internal and external audit teams for all compliance
Logs incidents into government systems for review
Manages cyber insurance evaluations and determines best path for reducing risk and keeping coverages
Develop and present cyber security and risk management presentations to senior management and board members as needed
Develops training materials and trains other staff
Takes lead in maintaining or developing IT processes
Project management
Software evaluation
System administration if needed
Custom programming if needed
Performs other related duties as required and assigned

Education And Experience Required

Degree in computer science or cybersecurity or applicable work experience
Strong cybersecurity or computer forensics background
Working knowledge of RMF, CMMC, NIST and other security frameworks
Proficient in Microsoft Office software products
Possession of or ability to get within 1 year - Active Security clearance
Possession of or ability to obtain CISSP certification within two years of taking position
Ability to work efficiently with many different types of people, skill levels, and personalities

Desired Job Qualifications

Experience working directly with business end-users preferred.
System administration background
IT auditing & compliance
Strong written and verbal communication skills
Ability to manage other people and projects
Strong security or IT operations background
Experience with EMASS,DISS, NISS, NBIS or other

Working Conditions

Work may require evening and weekend work
Traveling between buildings will be required

Skills

To perform the job successfully, an individual should demonstrate the following competencies:

Proficiency in word processing, spreadsheet, presentation, project management, enterprise resource planning, database software.
Ability and willingness to abide by set policies and/or safety programs established by Graham, our clients, and/or regulatory agencies which govern our performance and behavior in the normal course of our work while on Graham or the client’s property or job site.
Excellent written and verbal communication skills.
Strong organizational and time management skills.
High attention to detail.
Ability to successfully plan and implement objectives within established timelines and work schedules.
Ability to analyze problems and develop effective solutions at both strategic and functional levels.
Develop strategies to achieve organizational goals; Understand organization’s strengths and weaknesses; Analyzes market and competition; Identifies external threats and opportunities; Adapts strategy to changing conditions.
Demonstrate behavior consistent with company values.
Ability to work independently, with minimal direction as a highly motivated self-starter and within a team oriented culture.

Physical And Mental Demands

The physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of the position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Physical demands: May be required to move items up to 60 pounds for distances of up to 10 feet. May be required to stand, stoop, bend, kneel and squat for extended periods of time. May be exposed to fumes or dust, toxic or caustic chemicals, outdoor weather, moving mechanical parts and moderate to loud noise levels. Must wear appropriate protective gear and clothing as necessary
Require to speak and communicate clearly with others.
Mental demands: While performing the duties of this position, the individual is required to read, write, analyze data and reports, exercise judgement, develop plans, procedures and goals, present information to others and work under pressure.
Work environment: This job operates in a clerical office setting and in the manufacturing spaces. This role routinely uses standard office equipment such as computers, phones, photocopiers and filing cabinets.

Work Authorization/Security Clearance

Must be able to work in the United States without sponsorship. Ability to obtain US government security clearance is required.

Graham Corporation

New Jobs

Cyber Security Program Manager/FSO/ISSM