Information Assurance Admin IV

Overview

54996

Company: General Atomics

Job Summary: General Atomics (GA), and its affiliated companies, is one of the world’s leading resources for high-technology systems development ranging from the nuclear fuel cycle to remotely piloted aircraft, airborne sensors, and advanced electric, electronic, wireless and laser technologies. We have an exciting opportunity for a Cybersecurity Compliance Program Manager to join our Information Technology Services (ITS) Information Assurance team.

Reporting directly to the Senior Manager of IT Governance, Risk and Compliance, this role will support the IT compliance activities of the organization. With general supervision, this position is responsible for supporting the development and implementation of cybersecurity compliance programs, and related procedures.

• Develop, implement, and maintain IT compliance programs, policies, and procedures in accordance with relevant regulations, including but not limited to NIST Special Publications (e.g., NIST 800-171 Revisions 2,
  3), DFARS, FAR, CMMC (Levels 1 through
  3), ISO 27000 Series.
• Conduct regular internal assessments to evaluate the effectiveness of IT controls and identify areas for improvement.
• Manage external audits by government agencies (e.g., DCAA, DCMA) or third-party assessors.
• Collaborate with IT, security, and other departments to ensure systems and processes meet compliance requirements.
• Maintain knowledge of applicable policies, regulations, and compliance documents related to cybersecurity and information assurance.
• Participate in assessments of information technology systems; ensure periodic system security reviews are conducted and documented.
• Provide input to a cybersecurity awareness training program that engages and influences employees’ behavior.
• Develop appropriate electronic and hard copy reports and records, including new or revised documentation.
• Create compliance-related presentations for internal stakeholders as needed.
• Monitor changes in regulations and update policies and procedures accordingly.
• Serve as a point of contact for IT compliance-related inquiries.
• Investigate and address any compliance violations or incidents.
• Maintain the strict confidentiality of sensitive information.
• Encourages continuous learning to stay abreast of changes in regulatory and technology environments.
• Observe all laws, regulations, and other applicable obligations wherever and whenever business is conducted on behalf of the Company.
• Ensure work is accomplished in a safe manner in accordance with established operating procedures and practices.

We recognize and appreciate the value and contributions of individuals with diverse backgrounds and experiences and welcome all qualified individuals to apply.

• Job #: 54996
• Job Category: Information Technology
• 
  
  Travel Percentage
  
  Required:
  
  0% - 25%
• Full-Time/Part-Time: Full-Time Salary
• State: California
• Clearance Level: Secret
• Pay Range Low: 105,890
• City: San Diego
• Clearance Required?: Desired
• Pay Range High: 189,545
• Recruitment Posting
  
  Title:
  
  IT Compliance Program Manager

• Typically requires a bachelor’s degree in a related discipline and ten or more years of progressive professional experience in information assurance or a related field. Equivalent professional experience may be substituted in lieu of education.
• Prefer 6+ years experience with cybersecurity and IT compliance programs affecting highly regulated industries.
• CompTIA Security+, CISSP or higher certification strongly desired.
• Familiar with regulatory requirements that affect the Aerospace and Defense industry such as DFARS , , and Cybersecurity Maturity Model Certification (CMMC).
• Familiar with international regulatory requirements affecting Aerospace and Defense (e.g., UK Cyber Essentials, CPCSC).
• Familiar with applicable Artificial Intelligence (AI) regulations at local, state, federal and international levels.
• Familiar with ISO 27000 series and privacy regulations (e.g., CCPA, GDPR).
• Experience with utilizing tools to support compliance programs, such as GRC tools.
• Willingness to continuously learn and adapt to regulatory and technology changes.
• Experience organizing, planning, scheduling,…