CUI Program Manager - Automation

På ABB hjälper vi industrier att bli snabbare, mer resurseffektiva och hållbara. Här är framsteg en självklarhet - för dig, ditt team och hela världen. Som global marknadsledare ger vi dig rätt förutsättningar för att lyckas med det. Det kommer inte alltid att vara enkelt - utveckling kräver mod och styrka. På ABB är du aldrig ensam. Run what runs the world.

Denna position rapporterar till:

Global IS Manager-IAEN & IS Engagement

As a member of ABB Automation (AU) Business Area, directly reporting to Motion IS/IT management and indirectly reporting to ABB’s CUI Program Operations Manager, your role will oversee and lead the overall implementation and operational oversight of ABB’s Controlled Unclassified Information (CUI) Program for Automation.

In this role, you will lead the implementation and operationalization of Automation's CUI program including ownership of the Business Area System Security Plan (SSP), Plans of Actions and Milestones (POAMs), including related assets, processes, procedures, trainings and awareness, and utilization of ABB’s inherited enterprise SSP in accordance with the applicable version of NIST SP 800-171, also obtaining and maintaining Motion’s Cybersecurity Maturity Model Certification (CMMC) certification for both Federal Contract Information (FCI) and CUI.

Additionally, you will engage with the ABB’s CUI Program team, ABB’s U.S. Government Compliance team, and other functional teams to monitor proposed and pending regulations, governmental policies, and other agency actions related to information, data, and technology security affecting ABB’s infrastructure, products and solutions, and supply chains, and coordinate with ABB’s Automation business and functional groups to participate in rule making processes and implement business preparedness and implementation.

The work model for the role is: Remote #LI-Remote

• Lead Automation’s CUI compliance program implementation and operationalization through formulating, organizing, coordinating, directing and monitoring program activities as necessary to ensure compliance with US regulations such as 32 CFR Part 2002, 32 CFR Part 170, 48 CFR Part 204, pending proposed FAR Case , and agency-specific laws, regulations and policies for the handling and safeguarding of CUI.

• Collaborate and partner with business executives, leaders, functional stakeholders and organizations, to identify, develop and implement, inherited, common and business distinct solutions, including identifying, assigning, and performing oversight of key compliance roles including control owners and control performers, and ensuring individuals handle and safeguard CUI properly.

• Provide periodic accurate and timely reporting status, of compliance posture metrics, schedule, and challenges and program needs including necessary resources and commitments to the Automation Business Area, Divisions, and Business Lines leadership, project stakeholders, and ABB’s CUI Program team.

• Maintain Automation documentation, including System Security Plan (SSP), Plans of Action and Milestones (PO&AMs), control implementation guidelines, processes, and procedures. Promote and foster a culture of integrity and compliance aligned with ABB's global integrity program and ABB's U.S. government contractor code of business ethics and conduct program.

• Bachelor’s degree with minimum eight (8) years demonstrated program management experience in a large matrixed multi-business, multi-functional, organization.

• Practical experience in the application and implementation of the NIST (National Institute of Technology) Risk Management Framework, and related publications including NIST Special Publications 800-171 and / or 800-53, as applicable to nonfederal (private sector) organizations, and associated agency CUI-related laws, regulations, and governmental policies.

• 3 years CMMC program experience and 6 years implementing and maintaining a NIST SP 800-171 compliant environment. CMMC Certified Professional (CCP).

• Experience leading or directly supporting a DIBCAC High or Joint Surveillance NIST SP 800-171 and / or…