Information System Security Manager in Cranberry Township, PA at Westinghouse Electric Company

Date Posted: 11/24/2019

Job Snapshot

Job Description

Job ID: 30155BR

Are you interested in being part of an innovative team that supports Westinghouse’s mission to provide clean energy solutions? At Westinghouse, we recognize that our employees are our most valuable asset and we seek to identify, attract and recruit the most qualified talent while recognizing and encouraging the value of diversity in the global workplace.

If this sounds like an environment you would thrive in, we have an exciting opportunity for a Information System Security Manager in the Westinghouse Government Services group.

Your Day-to-Day:

The ISSM will be responsible for all security aspects of the CUI/ITAR/NOFORN networks and classified system(s) or network(s). The ISSM will support information system life cycle activities from rapidly establishing certified and accredited systems to support classified proposals, to scoping systems for new programs or new program segments, and preparing Risk Management Framework (RMF) packages, to regular maintenance, support and upgrades of systems during program execution, to program close-out and de-certification activities. The ISSM will need to quickly create security Assessment and Authorization documentation such as a System Security Plan (SSP) and RMF.
  • The ISSM’s role is to support Westinghouse Government Services LLC in meeting the needs of our program personnel while being compliant with Department of Defense, Department of Energy and/or Intelligence Community requirements.
  • Maintain day-to-day security posture and continuous monitoring of IS including security event log review and analysis.
  • Ensure system security measures comply with applicable government policies (NISPOM, NIST SP 800-171, 800-53, etc.).
  • Provide configuration management and accurately assess the impact of modifications and vulnerabilities for each system.
  • Maintain a thorough understanding of NIST 800-53 controls, and determine which controls are applicable to the application, as well as document implementation in Security Controls Tractability Matrix (SCTM).
  • Maintain appropriate operation information assurance (IA) posture for programs.
  • Create security Assessment and Authorization documentation such as a System Security Plan (SSP) and RMF quickly for a program in place according to all applicable security regulations/standards.
  • Conduct reviews and technical inspections (as defined in the SSP and as evident in best practices) to identify and mitigate potential security weaknesses, and ensure that all security features applied to a system are implemented and functional.
  • Serve as ISSM for DoD Controlled Unclassified Information Systems which is controlled for CUII, NOFORN and ITAR. Ensuring compliance with DoDM 5200.01-V4 and applicable NIST standards.
  • Establish and maintain a working relationship with Program Management, Program personnel, government customer, Program Partners, subcontractors/vendors, Branch FSO and AFSO/ISSO and corporate security leadership.
  • Prior to implementing changes to any already approved documentation or system set up, review changes with Branch FSO and Corporate Security. After review, obtain authorization/approval from accrediting authority to implement change.
  • Validate with Corporate and/or Branch FSO and AFSO/ISSO user access and user removal.
  • Provide to coporate security Insider Threat reports. Work closely with corporate securit, Branch FSO and AFSO/ISSO when discovering or when required to investigate report security violations, and incident reports.
  • Handles reportable non-compliances/violations in consultation with the corporate FSO, Program Management and Corporate Management for concurrence. Reporting requirements must be met on time and through appropriate channels.
  • Assists corporate security in conducting self-inspections in preparation for audits.
  • Preparation of written reports of surveys and inspections.
  • Required to respond to emergency situations.
  • Related training may be required and CISPP certification must be maintained.

Minimum Requirements:

As a successful candidate, you will bring the following to the team:

  • Bachelor’s Degree in related field or Four (4) years related equivalent experience in addition to experience below.

  • Three (3) or more years of experience (can be a combination of related experience in industry and the U.S. military) Experience as an ISSM implementing NISPOM Chapter 8, JAFAN 6/3, DCID 6/3, ICD 503, and/or JSIG IS requirements.
  • Have (strongly preferred) or obtain CISSP certification per DoD Directive 8570.1 within 6 months upon being hired.

Skills and Competencies:
  • The ability to maintain positive relationships with program personnel, branch and corporate security, the AFSO/ISSO and all government customers, security oversight and program partners.
  • The ability to work quickly with a high degree of accuracy while handling sensitive, controlled and classified information in a compliant manner is essential to this position.
  • Excellent analytical, troubleshooting and communication skills.
  • Requires independent judgment and discretion, as well as the identification, analysis and resolution of security related matters.
  • Experience with both Windows and Linux operating environments.
  • Experience in a research and development environment where software and algorithms are developed.
  • Ability/willingness to respond to emergency situations as needed.
  • Maintains awareness of upcoming customer / government driven changes and challenges and suggests approaches to meet those challenges
  • Excellent time management skills; keeps commitments
  • Familiarity with vulnerability scans, ODAA Baseline Standard Requirements and Risk Management Framework.
  • This position requires US Citizenship, and the ability to obtain and maintain security clearance (level to be determined). Clearance must be maintained without interruption.


"Why Westinghouse?

Westinghouse Electric Company is the global nuclear energy industry’s first choice for safe, clean, and efficient energy solutions. We enable our delivery of this vision by living our value system:

  • Safety & Quality First

  • Valuing Ethics, Integrity & Diversity

  • Passion for Serving Our Customers Globally

  • Dedication to Each Other Through Servant Leadership

  • Creating Value for Shareholders, Customers and Employees

  • Consistently Delivering Our Commitments.

Westinghouse offers competitive benefits to all our employees around the globe to keep them healthy and enhance their well-being. In the U.S. the following are representative of what we offer:
  • Competitive Salary
  • Comprehensive Health, Wellness and Income Protection Benefits
  • 401(k) Savings Plan with Company Match
  • Paid Vacations and Holidays
  • Opportunities for Flexible Work Arrangements
  • Educational Reimbursement Program
  • Employee Referral Program

While our Global Headquarters are located in Cranberry Township, PA, we have over 9,000 employees working at locations in 19 different countries. You can learn more by visiting link

EOE of Minorities / Females / Vets / Disability.

Keep in mind that only applications completed and submitted via the Westinghouse Careers website will be considered. You can submit your completed application, and also explore other available options, using the following link: link

Get connected with Westinghouse on social media:

Twitter | Facebook | LinkedIn| YouTube


Employment opportunities for positions in the United States may require use of information which is subject to the export control regulations of the United States. Hiring decisions for such positions are required by law to be made in compliance with these regulations. Applicants for employment opportunities in other countries must be able to meet the comparable export control requirements of that country and of the United States.