What are the responsibilities and job description for the Information Security Systems Manager position at AEVEX?
Work Arrangement
Ability to work on-site in Dayton, OH, with 20% travel to our Florida site to support related security
projects.
Job Overview
We are seeking an Information Systems Security Manager (ISSM) with extensive hands-on experience driving cybersecurity compliance within a defense contractor environment and leading classified network security initiatives, ensuring compliance with Risk Management Framework (RMF), NIST 800-53, DFARS 252.204-7012, and 32 CFR Part 117 (NISPOM).
Essential Functions
• Lead and manage the security posture of classified SIPR networks, ensuring compliance with DoD
security policies and CMMC requirements.
• Develop, implement, and maintain security policies, procedures, and documentation to protect
classified systems.
• Own and manage system accreditation packages with hands-on experience using eMASS and
Xacta, ensuring Authority to Operate (ATO) maintenance.
• Conduct regular security audits, vulnerability assessments, and risk analyses, proactively
mitigating threats to classified systems.
• Oversee and drive incident response procedures for classified environments, ensuring timely
reporting and mitigation of security incidents.
• Administer and optimize security tools and technologies, including HBSS, ACAS, and SIEM
Solutions.
• Collaborate with government security agencies, internal teams, and executive leadership to
ensure compliance and address security concerns.
• Ensure compliance with DoD 8570/8140 certification requirements and maintain appropriate
cybersecurity credentials.
• Support and lead security inspections, audits, and self-assessments to uphold regulatory
standards.
• Perform other duties as required
Standard Essential Functions
• Regular and reliable attendance on a full time basis [or in accordance with posted schedule].
• Responsible for exhibiting professional behavior with both internal and external business
associates that reflects positively on the company and is consistent with the company's policies
and practices.
• Embodies AEVEX’s cultural values and aligns daily actions with department goals and company
culture.
Qualifications and Competencies
• Expert knowledge of RMF, NIST 800-53, DFARS 252.204-7012, CMMC, and 32 CFR Part 117
(NISPOM).
• Proven experience managing system accreditations with eMASS and Xacta.
• Strong leadership experience in building and managing security teams.
• Hands-on experience with HBSS, ACAS, SIEM solutions, and other cybersecurity tools.
Education / Certifications
• Bachelors Degree in cybersecurity, IT, computer science, or other related field preferred.
• Certifications: CISSP, or equivalent (Security CE alone is not sufficient).
Experience
• 2 - 5 years of hands-on experience as an ISSM within a defense contractor environment, leading
cybersecurity compliance initiatives.
Security Clearance
• Current Top Secret DoD clearance preferred, U.S. Citizenship required