MANAGER INFORMATION SECURITY

The Marvin Group is a Strategic Partner for Global Alternate Mission Equipment and Sustainment
The Marvin Group, a leading defense contractor, plays a crucial role in the development and manufacturing of various systems for military aerospace and vehicles. Based in Southern California near the Los Angeles International Airport, The Marvin Group consists of Marvin Engineering (MEC), Marvin Test Solutions (MTS) and Marvin Land Systems (MLS). Marvin Engineering designs and produces military Alternate Mission Equipment. Marvin Test Solutions designs and manufactures armament Test Equipment. Marvin Land Systems specializes in the design and build of power and thermal management systems. For over 60 years we have maintained “A Tradition of Excellence”, serving as a trusted source for our unwavering commitment to supporting all branches of the Department of Defense and our global allies. Our collaboration extends across a diverse array of programs and platforms, including major military prime contractors such as Lockheed Martin, Northrop Grumman, and Raytheon.

POSITION SUMMARY:

The Manager, Information Security will be responsible for developing, implementing and monitoring a strategic, comprehensive enterprise cybersecurity program. The Manager, Information Security will provide the vision and leadership necessary to manage the risk to the organization and will ensure business alignment, effective governance, system and product availability, integrity and confidentiality. This position reports to the Director Information Technology.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Oversee the Information Security team and responsible for maintaining standards, processes and solutions
• Engage with senior leadership to develop, design, and deliver a sustainable governance and assurance model across multiple domains to ensure security guidance is implemented as defined.
• Direct, plan, and organize activities and projects for Information security team, address current and emerging security risks in a complex and highly regulated environment.
• Develop an information security vision and strategy that is aligned to organizational priorities and enable and facilitate the organization's business objectives, and ensure senior stakeholder buy-in and mandate
• Identify, monitor and evaluate operational solutions to reduce information security risk, meet compliance requirements and increase workforce efficiency, business agility and workforce scalability.
• Provide regular reporting on the current status of the information security program to leadership.
• Facilitate metrics and reporting framework to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation, and increase the maturity of the information security team, and review it with stakeholders at the executive levels.
• Work with supply chain to ensure that information security requirements are included in contracts by liaising with supply chain management and procurement organizations.
• Conduct vulnerability assessments to identify potential security threats.

SKILLS AND REQUIREMENTS:

• Minimum of 4 - 7 years of experience in a combination of risk management, information security and IT or OT jobs
• Degree in Computer Science or technology-related field, or equivalent work- or education-related experience
• Professional security management certification, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials.
• Expert knowledge of relevant regulations and standards related to risk management and information security for defense contractors, e.g. CMMC, NIST SP 800-171, NIST 800-53
• Strong Emotional Intelligence with demonstrated sustained leadership in a large organization involving multiple stakeholders.
• Demonstrated ability to work with diverse people; effective oral and written communication skills.
• Demonstrated management skills, e.g., budget development and administration, policy development and implementation, personnel administration, staff training and development.
• Up-to-date knowledge of methodologies and trends in both business and IT
• Excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives
• Project management skills: financial/budget management, scheduling and resource management
• Experience in establishing cybersecurity and risk metrics for reporting

WORK ENVIRONMENT:

• Medium-to-large office environment
• Fast paced office environment
• The noise level in the work environment is usually moderate
• Exposed to a combination of normal office type environments

TRAVEL REQUIREMENTS:

There are typically no travel requirements for this position (0%)

NOTES: This job description in no way states or implies that these are the only duties to be performed by this position's employee(s). Employees will be required to follow any other job-related instructions and perform any other job-related duties requested by anyone authorized to give instructions or assignments. All duties and responsibilities are essential functions and requirements and are subject to possible modification to accommodate individuals with disabilities reasonably. To perform this job successfully, the employee(s) will possess the skills, aptitudes, and abilities to perform each duty proficiently. Some requirements may exclude individuals who pose a direct threat or significant risk to the health or safety of themselves or others. The requirements listed in this document are the minimum levels of knowledge, skills, or abilities. This document does not create an employment contract, implied or otherwise, other than an at-will relationship.

This position must meet export control compliance requirements. All applicants must be “U.S. persons” within the meaning of ITAR, as defined: a U.S. Citizen, a lawful permanent resident, political asylee, or refugee.