Job Description
The Hiller Companies, LLC has an immediate opening for Information Systems Security Manager (ISSM), knowledgeable and experienced NIST 800-171 and CMMC compliance. If you are a dedicated professional with a passion for fire protection and safety, we invite you to apply today.
The Hiller Companies is a leading provider of fire protection and safety solutions, dedicated to safeguarding lives and property all around the world. Headquartered in Mobile, Alabama, Hiller extends its reach globally as well as in domestic markets with offices across the United States. With over 100 years in the industry, our mission is to ensure the highest standard of safety and innovation in comprehensive fire protection services, including installation, inspection, maintenance and repair of critical fire and life safety equipment. Our team remains laser-focused on one goal - making the world a safer place.
Job Summary: The ISSM is a key part of our Information Technology Department, responsible for managing the organization's digital assets and information systems, ensuring their security, integrity, and confidentiality. The role includes managing and enforcing our security policies and procedures, risk management, information security awareness, and incident response. Must be able to collaborate effectively with stakeholders across all levels of the organization, from the technical team to executive leadership.
Key Responsibilities:
- Develop and implement an overall information security strategy and security programs to protect the organization's information systems and data.
- Understand and ensure compliance with NIST 800-171 and CMMC regulations, as well as other applicable security standards.
- Stay updated with the current landscape of threats, vulnerabilities, and advances in information security.
- Develop, implement, and maintain security policies, standards, guidelines, and procedures to ensure ongoing information security.
- Collaborate with stakeholders across the organization to identify, analyze, and mitigate information security risks.
- Coordinate with technology and business groups to assess, implement, and monitor IT-related security risks/hazards.
- Oversee incident response planning as well as the investigation of security breaches, and assist with disciplinary and legal matters associated with such breaches.
- Conduct regular security audits, vulnerability assessments, and penetration tests to ensure compliance with NIST 800-171 and CMMC standards.
- Oversee the training and dissemination of security policies and practices.
- Evaluate and recommend security technologies to strengthen our defenses.
- Ensure compliance with changing laws and applicable regulations related to information security.