Job Information
Vectrus Chief Information Security Officer in Orlando, Florida
Overview
About Us
Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $4B company and 16,000+ people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.
Responsibilities
What You'll Do:
V2X is searching for a Chief Information Security Officer (CISO). The CISO’s primary focus as a senior level executive is to oversee the V2X organization’s information, cyber, and technology security strategy. The overall CISO's responsibilities include developing, implementing, maintaining, and enforcing security governance, risk, and compliance policies to protect critical data. The CISO will work closely with the VP of Compliance, Innovation & Applications, VP of IT Operations, the Director of Corporate Security, and the Profit and Loss senior executives to ensure V2X has an overarching, and comprehensive security program ensuring protection of V2X’s assets, applications, systems, and technology against security threats while enabling and advancing business outcomes. The CISO will report directly to the Senior Vice President for Enterprise Integration and Transformation.
Key Responsibilities:
Provide leadership to the enterprise’s information security organization.
Develop and implement secure processes and systems used to prevent, detect, mitigate, and recover from cyberattacks.
Educate and manage technology risk in collaboration with business leaders to include facilitating risk assessment and risk management processes.
Understand and interact with related disciplines through committees, standards to ensure the consistent application of policies and standards across all technology projects, systems, and services.
Build and drive a cybersecurity strategy and framework, with initiatives to secure the organization's cyber and technology assets.
Continue to evaluate the cyber and technology threats to manage the risk posture of the organization.
Implement and manage the cyber governance, risk, and compliance (GRC) process – must be globally aligned.
Lead cybersecurity operation and implement contingency plans for disaster recovery protocols and business continuity plans with business resilience in mind.
Report to the most senior levels of the organization (the CEO and board of directors, or equivalent) on all issues that have the potential to disrupt business continuity.
Develop, justify, and evaluate cybersecurity investments.
Develop and implement ongoing security awareness training and education for V2X personnel and subcontractors/partners.
Qualifications
Minimum Requirements:
Education:
Bachelor of Science degree in Computer Science, Information Technology, Cyber Security, or related field
M.S., and/or PhD from an accredited institution preferred.
Certifications/Licenses:
Current CISSP (or equivalent) certification highly desired
Experience:
Minimum of fifteen (15) years of IT experience, of which the last ten (10) years in the Cybersecurity field.
Experience in the government contracting space required.
Experience with contract and vendor negotiations and management including managed services.
Specific experience in Agile (scaled) software development or other best in class development practices.
Thorough understanding and demonstrated knowledge of the ISO 27001 certification and compliance program
Preferred Experience:
Experience supporting a large, global, public company preferred.
Other Requirements:
- Ability to obtain/retain Secret clearance.
Ability to travel periodically.
U.S. Citizenship required
Business/Information Security Acumen:
Have a thorough understanding and demonstrated knowledge of the National Institute of Standards (NIST) compliance – to include NIST CMMC compliance, Plan of Action, and Milestones (POAMs), and course of action for V2X.
Knowledge of Information Technology Infrastructure Library (ITIL) with respect to security administration and information technology governance in a multi-platform environment.
Experience in establishing cybersecurity and risk metrics for reporting, with a roadmap of security issues (Critical, Medium, and Low) to include a work-off plan.
Experience with contract and vendor negotiations and management including managed services.
Specific experience in Agile (scaled) software development or other best in class development practices.
Understanding and demonstrated knowledge of Controlled Unclassified Information (CUI) and the parameters of protecting CUI for our internal systems and V2X customers.
Possess demonstrated experience in developing clear compelling security business and USE cases that support prioritization of work across multiple lines of business.
Business Partner/Effective Communication/Process Improvement:
Ability to represent V2X at the highest level with the US government and V2X’s customers.
Ability to establish a cybersecurity strategy, while collaborating with the V2X senior executive staff, to ensure company information security and business requirements are met and consistent with V2X policies.
Innovative thinker and leader with an ability to lead and motivate cross-functional, interdisciplinary teams
Lead with Character/Collaboration and Teamwork/Influence:
Strong Emotional Intelligence with demonstrated sustained leadership in a large organization involving multiple stakeholders.
Demonstrated management skills, e.g., budget development and administration, policy development and implementation, personnel administration, staff training and development.
Organizationally savvy, with good interpersonal effectiveness, influence, and ability to get things done through both formal and informal means across organizational boundaries.
Exhibit strong people leadership with the proven ability to inspire an organization to deliver high-class customer experience to the V2X organization.
Ability to lead and motivate cross-functional, interdisciplinary teams.
Demonstrated experience in developing clear compelling security business and Use cases that support prioritization of work across multiple lines of business.
Ensures alignment to the enterprise service management processes for Change Management, Incident Management, Problem Management and Service Request Fulfillment processes, ensuring appropriate governance procedures are in place, communicated and proactively managed.
Additional Information:
At V2X we strive to be market competitive in our total reward offerings.
The successful candidate’s starting pay will be based on, but not limited to, their job-related skills, experience, qualifications, work location, and market conditions.
Benefits include the following:
Healthcare coverage
Retirement plan
Life insurance, AD&D, and disability benefits
Wellness programs
Paid time off, including holidays
Learning and Development resources
Employee assistance resources
Pay and benefits are subject to change at any time and may be modified at the discretion of the company, consistent with the terms of any applicable compensation or benefit plans.
We are committed to an inclusive and diverse workplace that values and supports the contributions of each individual. This commitment along with our common Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation and expand our success in the global marketplace. Vectrus is an Equal Opportunity /Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, protected veteran status or status as an individual with a disability. EOE/Minority/Female/Disabled/Veteran.
Vectrus
-
- Vectrus Jobs