Sr Director Business Systems Cybersecurity at Sierra Nevada Corporation
Herndon, VA 20170
About the Job
As the Business Systems Cybersecurity Senior Director at SNC, you will oversee all enterprise-wide cybersecurity activities
You will be responsible for maturing our strategic cybersecurity program to proactively address emerging cyber risks, directing SNC’s cybersecurity initiatives, processes and projects, strategically planning and implementing industry best practices, and partnering with SNC peers to foster an environment of continuous improvement, with a strong focus on compliant business success and an emphasis on DFARs and CMMC compliance
You will maintain strong relationships with both internal and external customers and manage your cybersecurity labor, tools and budget
You will be responsible for thoughtful adherence to all SNC policies, procedures, and compliance regulations (internal and external), and for timely execution of all personnel-related activities such as timesheet completion, performance evaluations, salary reviews, succession planning, etc., as well as leadership oversight and ensuring department/team development and training.As SNC's corporate team, we provide the company and its business areas with strategic direction and business support spanning executive management, finance and accounting, operations, human resources, legal, IT, information security, facilities, marketing, and communications.Responsibilities Include:Maintain and continue to develop a comprehensive cybersecurity program aligned to best practices, while overseeing security risks, incident response, and recovery effortsCollaborate with stakeholders to ensure security initiatives align with business objectives, while monitoring emerging threats and trends in the cybersecurity landscapeProvide regular reports and updates to executive leadership on the status of the cybersecurity programEstablish and maintain relationships with external partners and vendors to ensure effective security operationsFoster a culture of continuous improvement and collaboration to improve processes and compliance, while maintaining compliance with DFARs and CMMC regulationsProvide guidance and oversight to the security team, ensuring they are properly trained and equipped to perform their dutiesMaintain strong relationships with internal and external customers to support enterprise cybersecurity activitiesProvide leadership oversight and ensure team is developed to promote growth and successEnsure thoughtful adherence to all SNC policies, procedures, and compliance regulationsMust Haves: Bachelor's Degree in a related field of studyRelevant experience may be considered in lieu of required educationMinimum 10 years of increasing levels of experience directly related to leading, management, and scaling of cybersecurity teams and assetsExperience implementing cyber frameworks, such as NIST (National Institute of Standards and Technology) 800-171 and 800-53, Cybersecurity Maturity Model Certification (CMMC), MITRE ATT&CK, Zero Trust Architecture, DFARS, and industry best practicesExperience working in at least two of the following areas of responsibilities (AORs); Vulnerability Management, Governance, Risk, and Compliance (GRC), Threat Hunting, Incident Response, Cybersecurity Architecture and EngineeringKnowledge of network architecture concepts including topology, protocols, and components and network management principles, models, and tools, including the application of Defense-In-Depth principles, Zero Trust, Principle of Least Privilege and knowledge of network traffic analysis methodsDemonstrated experience in hybrid environments; on premise, public and private cloud, Software as a Service (SaaS), Infrastructure as a Service (IaaS)Ability to seamlessly switch from executive-level risk conversations to diving deep into controls and technologyDemonstrated clear communication skills and ability to interact effectively at all levels of an organization, and to influence senior management and executives (Including translating technical information based on specific audiences)Proven leadership abilities inclusive of successful change management, mentoring, career development, training, succession planning, holding people accountable, and conducting yearly reviewsMastery of the ability to drive innovative thinking, lead and inspire your team, instill collaboration, challenge status quo, manage complex situations, delegate authority, and demonstrate ability to adapt to dynamic situationsProven experience and skills in team building, time management, conflict resolution, communication, briefing, presentation, and strategic thinkingStrong communication skills, including the ability to clearly express concepts in verbal and written formsAbility to navigate changeProven ability to develop and implement policy, influence partners to incorporate security requirements into functional area operations, and drive process improvement both internal and external to the security organizationExperience in managing complex cybersecurity systemsProven ability to interpret intent of available guidelines/regulations and use considerable judgement in applying them to individual situationsProven long-term and strategic perspective that extends beyond the immediate initiatives; visualizes and articulates a clear directionTeam oriented with the ability to work independently with minimal supervisionActive or have previously held a minimum of a Secret clearance with the ability to obtain and maintain a Top-Secret security clearancePreferred:Typically 15-20 years of relevant experience; 12+ years demonstrated cybersecurity experienceAdvanced degree in CybersecurityKnowledge of the National Industrial Security Program (NISP)Background in the Aerospace and Defense Industry, the US Department of Defense (Civilian), the US Intelligence Community, NASA/Civil or commercial space and/or US Military, with an understanding of defense, aerospace, intelligence, and adjacent marketsProfessional cybersecurity certifications such as GSLC, GCIH, GDSA, CISM, and CISSPFamiliarization with Cloud Security and Application SecurityExperience exercising project management and project delivery methodologiesExperience directing a Security Operations Center or Emergency Operations CenterExperience with Crisis Management protocolsDemonstrated passion for ideation, intellectual curiosity, and innovation, as well as motivating others to act by creating a shared sense of vision or purposeEstimated Starting Salary: $194,559.46 - $267,519.25SNC offers annual incentive pay based upon performance that is commensurate with the level of the position.SNC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with 150% match up to 6%, life insurance, 3 weeks paid time off, tuition reimbursement, and more.IMPORTANT NOTICE:This position requires current/active Secret U.S
Security Clearance
U.S
Citizenship status is required as this position needs an active U.S
Security Clearance for employment
Non-U.S
Citizens may not be eligible to obtain a security clearance
The Department of Defense Consolidated Adjudications Facility (DoD CAF), a federal government agency, handles the adjudicative aspects of the security clearance eligibility process for industry applicants
Adjudicative factors which affect the outcome of the eligibility determination include, but are not limited to, allegiance to the U.S., foreign influence, foreign preference, criminal conduct, security violations and illegal drug use.Learn more about the background check process for Security Clearances
SNC is a global leader in aerospace and national security committed to moving the American Dream forward
We’re known and respected for our mission and execution focus, agility, and disruptive and rapid innovation
We provide leading edge technologies and transformative solutions that support our nation’s most critical security needs
If you are mission-focused, thrive in collaborative environments, and want to make our country stronger with state-of-the-art technologies that safeguard freedom, join our team!As an Equal Opportunity Employer, we welcome our employees to bring their whole selves to their work
SNC is committed to fostering an inclusive, accepting, and diverse environment free of discrimination
Employment decisions are made without regarding to race, color, age, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran or other characteristics protected by law
Contributions to SNC come in many shapes and styles, and we believe diversity in our workforce fosters new and greater ways to dream, innovate, and inspire.SummaryLocation: Sparks, NV; Herndon, VA; Plano, TX; Lone Tree, COType: Full time
You will be responsible for maturing our strategic cybersecurity program to proactively address emerging cyber risks, directing SNC’s cybersecurity initiatives, processes and projects, strategically planning and implementing industry best practices, and partnering with SNC peers to foster an environment of continuous improvement, with a strong focus on compliant business success and an emphasis on DFARs and CMMC compliance
You will maintain strong relationships with both internal and external customers and manage your cybersecurity labor, tools and budget
You will be responsible for thoughtful adherence to all SNC policies, procedures, and compliance regulations (internal and external), and for timely execution of all personnel-related activities such as timesheet completion, performance evaluations, salary reviews, succession planning, etc., as well as leadership oversight and ensuring department/team development and training.As SNC's corporate team, we provide the company and its business areas with strategic direction and business support spanning executive management, finance and accounting, operations, human resources, legal, IT, information security, facilities, marketing, and communications.Responsibilities Include:Maintain and continue to develop a comprehensive cybersecurity program aligned to best practices, while overseeing security risks, incident response, and recovery effortsCollaborate with stakeholders to ensure security initiatives align with business objectives, while monitoring emerging threats and trends in the cybersecurity landscapeProvide regular reports and updates to executive leadership on the status of the cybersecurity programEstablish and maintain relationships with external partners and vendors to ensure effective security operationsFoster a culture of continuous improvement and collaboration to improve processes and compliance, while maintaining compliance with DFARs and CMMC regulationsProvide guidance and oversight to the security team, ensuring they are properly trained and equipped to perform their dutiesMaintain strong relationships with internal and external customers to support enterprise cybersecurity activitiesProvide leadership oversight and ensure team is developed to promote growth and successEnsure thoughtful adherence to all SNC policies, procedures, and compliance regulationsMust Haves: Bachelor's Degree in a related field of studyRelevant experience may be considered in lieu of required educationMinimum 10 years of increasing levels of experience directly related to leading, management, and scaling of cybersecurity teams and assetsExperience implementing cyber frameworks, such as NIST (National Institute of Standards and Technology) 800-171 and 800-53, Cybersecurity Maturity Model Certification (CMMC), MITRE ATT&CK, Zero Trust Architecture, DFARS, and industry best practicesExperience working in at least two of the following areas of responsibilities (AORs); Vulnerability Management, Governance, Risk, and Compliance (GRC), Threat Hunting, Incident Response, Cybersecurity Architecture and EngineeringKnowledge of network architecture concepts including topology, protocols, and components and network management principles, models, and tools, including the application of Defense-In-Depth principles, Zero Trust, Principle of Least Privilege and knowledge of network traffic analysis methodsDemonstrated experience in hybrid environments; on premise, public and private cloud, Software as a Service (SaaS), Infrastructure as a Service (IaaS)Ability to seamlessly switch from executive-level risk conversations to diving deep into controls and technologyDemonstrated clear communication skills and ability to interact effectively at all levels of an organization, and to influence senior management and executives (Including translating technical information based on specific audiences)Proven leadership abilities inclusive of successful change management, mentoring, career development, training, succession planning, holding people accountable, and conducting yearly reviewsMastery of the ability to drive innovative thinking, lead and inspire your team, instill collaboration, challenge status quo, manage complex situations, delegate authority, and demonstrate ability to adapt to dynamic situationsProven experience and skills in team building, time management, conflict resolution, communication, briefing, presentation, and strategic thinkingStrong communication skills, including the ability to clearly express concepts in verbal and written formsAbility to navigate changeProven ability to develop and implement policy, influence partners to incorporate security requirements into functional area operations, and drive process improvement both internal and external to the security organizationExperience in managing complex cybersecurity systemsProven ability to interpret intent of available guidelines/regulations and use considerable judgement in applying them to individual situationsProven long-term and strategic perspective that extends beyond the immediate initiatives; visualizes and articulates a clear directionTeam oriented with the ability to work independently with minimal supervisionActive or have previously held a minimum of a Secret clearance with the ability to obtain and maintain a Top-Secret security clearancePreferred:Typically 15-20 years of relevant experience; 12+ years demonstrated cybersecurity experienceAdvanced degree in CybersecurityKnowledge of the National Industrial Security Program (NISP)Background in the Aerospace and Defense Industry, the US Department of Defense (Civilian), the US Intelligence Community, NASA/Civil or commercial space and/or US Military, with an understanding of defense, aerospace, intelligence, and adjacent marketsProfessional cybersecurity certifications such as GSLC, GCIH, GDSA, CISM, and CISSPFamiliarization with Cloud Security and Application SecurityExperience exercising project management and project delivery methodologiesExperience directing a Security Operations Center or Emergency Operations CenterExperience with Crisis Management protocolsDemonstrated passion for ideation, intellectual curiosity, and innovation, as well as motivating others to act by creating a shared sense of vision or purposeEstimated Starting Salary: $194,559.46 - $267,519.25SNC offers annual incentive pay based upon performance that is commensurate with the level of the position.SNC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with 150% match up to 6%, life insurance, 3 weeks paid time off, tuition reimbursement, and more.IMPORTANT NOTICE:This position requires current/active Secret U.S
Security Clearance
U.S
Citizenship status is required as this position needs an active U.S
Security Clearance for employment
Non-U.S
Citizens may not be eligible to obtain a security clearance
The Department of Defense Consolidated Adjudications Facility (DoD CAF), a federal government agency, handles the adjudicative aspects of the security clearance eligibility process for industry applicants
Adjudicative factors which affect the outcome of the eligibility determination include, but are not limited to, allegiance to the U.S., foreign influence, foreign preference, criminal conduct, security violations and illegal drug use.Learn more about the background check process for Security Clearances
SNC is a global leader in aerospace and national security committed to moving the American Dream forward
We’re known and respected for our mission and execution focus, agility, and disruptive and rapid innovation
We provide leading edge technologies and transformative solutions that support our nation’s most critical security needs
If you are mission-focused, thrive in collaborative environments, and want to make our country stronger with state-of-the-art technologies that safeguard freedom, join our team!As an Equal Opportunity Employer, we welcome our employees to bring their whole selves to their work
SNC is committed to fostering an inclusive, accepting, and diverse environment free of discrimination
Employment decisions are made without regarding to race, color, age, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran or other characteristics protected by law
Contributions to SNC come in many shapes and styles, and we believe diversity in our workforce fosters new and greater ways to dream, innovate, and inspire.SummaryLocation: Sparks, NV; Herndon, VA; Plano, TX; Lone Tree, COType: Full time
