Information System Security Officer

About This Role

Who We Are:

• CAE Vision: Our vision is to be the worldwide partner of choice in defense and security, civil aviation, and healthcare by revolutionizing our customers’ training and critical operations with digitally immersive solutions to elevate safety, efficiency and readiness.
• CAE Defense & Security Mission: CAE's Defense and Security business unit focuses on helping prepare military customers to develop and maintain the highest levels of mission readiness.
• CAE Values: Empowerment, Innovation, Excellence, Integrity and OneCAE make us who we are and we strive to make a difference in the world while helping each other succeed.
   

What We Have to Offer:

• Comprehensive and competitive benefits package and flexibility that promotes work-life balance
• A work environment where all employees are valued, respected and safe
• Freedom to succeed by enabling team members to deliver, take initiatives and make decisions
• Recognition, professional development, advancement and having fun!
   

Summary 

The ISSO will provide Cybersecurity subject matter expertise with government security procedures and policies and ensure compliance and quality control across multiple architectures and government systems.

Essential Duties and Responsibilities 

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 

• Provide support to certification and accreditation implementing the Risk Management Framework (RMF) across multiple classification domains and update status in the Enterprise Mission Assurance Support Service (eMASS) system.
• Create, update and maintain artifacts for systems accreditation within Enterprise Mission Assurance Support Service (eMASS)
• Work with system/network administrators to conduct vulnerability scanning using latest DoD security tools (Nessus Security Center)
• Perform host-based security monitoring utilizing McAfee Enterprise Policy Orchestra (McAfee ePO)
•  Document cybersecurity tactics, techniques and procedures; maintaining document repository
• Collaborate with network administrators to develop and maintain DISA compliant Ports Protocols Services Management (PPSM) data for all systems assigned.
• Collaborate with configurations management to develop and maintain authorized hardware/software lists for all systems assigned.
• Work as an integrated team member in a highly dynamic, operationally sensitive environment providing mission critical data to the war fighter.
• Communicate and coordinate across the Cybersecurity team for cyber-related issues.
• Analyze security risks, threats and vulnerabilities from multiple sources and recommend strategies to leadership to prevent security exposures and detect intruders.
• Create plans to implement solutions and follow them through to completion keeping all stakeholders informed.
• Review, maintain and report compliancy of Cybersecurity Task/Operational Orders with appropriate governing entities.
• Stay current with Government and industry trends, laws and standards and recommend methods to meet requirements.
• Analyze and define information security requirements for current and future internal and external data connections and maintain documentation for those connections in a central repository.
• Coordinate with external cybersecurity teams for  vulnerability testing of the MMC cybersecurity posture
• Perform and document Account Access Authorization and Control for all information systems assigned

Qualifications and Education Requirements 

• Certifications: CompTIA Security+
• TS/SCI Clearance required. Ability to perform multiple projects with dynamic tasking and follow-through from beginning to end on assigned tasks.
• Ability to work as an integrated member of a dynamic and mission focused team to promote a cooperative working environment and a positive team atmosphere.
• Working knowledge of cyber doctrine and DoD/Industry Cybersecurity best practices.
• Working knowledge of network protocols and MS Windows defense and threat mitigation.
• The ability to think analytically and approach issues logically and systematically.
• Excellent spoken and written communications skills.

Preferred Qualifications

• Education: AAS/BA/BS
• Certifications: CISSP, CISM, CASP, C|EH, CHFI
• Desired experience with eMASS, Trellix (previously McAfee) ePolicy Orchestrator, Assured Compliance Assessment Solution (ACAS), and Security Content Automation Program (SCAP)/Security Technical Implementation Guide (STIG), Amazon Web Services

Security Responsibilities 

Must comply with all company security and data protection / usage policies and procedures.  Personally responsible for proper marking and handling of all information and materials, in any form. Shall not divulge any information, or afford access, to other employees not having a need-to-know. Shall not divulge information outside company without management approval.  All government and proprietary information will be accessed and stored electronically on company provided resources.  

•  Incumbent must be eligible for DoD Personal Security Clearance. 

Due to U.S. Government contract requirements, only U.S. citizens are eligible for this role. 

Work Environment 

This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.  Travel is occasional (1-2 times per year).

Other Duties 

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for their job. Duties, responsibilities, and activities may change at any time with or without notice. 

CAE USA Inc. is an EOE/AA employer and gives consideration for employment to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you’d like more information about your EEO rights as an applicant under the law, please click here Know Your Rights: Workplace Discrimination is Illegal. 

PAY TRANSPARENCY NONDISCRIMINATION PROVISION The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 

Position Type                       

CAE thanks all applicants for their interest. However, only those whose background and experience match the requirements of the role will be contacted.

Equal Opportunity Employer 

CAE is an equal-opportunity employer committed to diversity, equity, and inclusion. As "One CAE," we take affirmative action to ensure equal opportunity for all applicants regardless of race, nationality, colour, religion, sex, gender identity and expression, sexual orientation, disability, neurodiversity, Veteran status, age, or other legally protected characteristics.  

If you don't see yourself fully reflected in every job requirement listed in the job posting, we still encourage you to reach out and apply. At CAE, everyone is welcome to contribute to our success. If reasonable accommodation is needed to participate in the job application or interview process, please get in touch with us at rh-hr@cae.com.