Job Description

Purpose of Role:

This position provides subject matter expertise with regards to cyber security standards and compliance requirements. Supports cyber security efforts, including the development and execution programs promoting business unit compliance and awareness. Supports the design, implementation and maintenance of Group-wide Security standards, policies and control objectives. Reports to the IT Director.

Identifies existing and emerging statutory, regulatory, and contractual cyber requirements and develops strategy to incorporate/map required changes to digital security standards, policies and control objectives. Monitor and report on compliance requirements and programs.

Identifies technical requirements and opportunities for improvements related to compliance, defense in depth, and best practices. Develop strategy, present options and recommendations. Drive key projects, solution evaluation and implementation to include transfer to operations.

Evaluate and report on information security risks in a manner that meets compliance and regulatory requirements and aligns with and supports the risk posture of the BIS and the Smiths Group.

Smiths is the leading provider of security equipment to the US government, foreign governments, and commercial interests, including but not limited to DHS, FPS, TSA, CBP, USMS, USSS, Air Cargo shippers, and many others. It is important that the ISSO be aware of, and expert in many levels of equipment offerings. The ISSO must understand the nature of real-time embedded systems and software, as well as networks of systems and larger integrated systems that can be built from component systems.

Knowledge of standards applicable to the domain: ISO27001, DHS Management Directives (MDs), Information Technology (IT) Security Policies and Handbooks (e.g., DHS 4300A), as well as the procedures and tools to implement those policies.

Department Description:

• The Information & Cyber Security function, is responsible for ensuring the secure design and delivery of the enabling infrastructure in line with best practice, international standards, defense-in-depth, and compliance requirements
• Responsible for SDI cyber security principles, strategies, policies, guidelines, and control objectives.
• Supports mandatory statutory, regulatory, and contractual cyber controls.
• Responsible for promiting and supporting SDI cyber security and compliance awareness.
• Responsible for maintaining availability, support and capacity across the core network and delivery of systems and application services
• Responsible for managing internal and external audits

Team Description:

• The Information/Cyber Security Team is part of the SDI business within the Smiths Group. It is our role to provide for the information security of Smiths assest and to make information security relevant, simple and transformational. We support our colleagues in achieving their goals in a secure manner, maintaining confidentiality, integrity and availability.

Key Accountabilities or Duties:

• Develop, implement and monitor a strategic, comprehensive security compliance management program to ensure the integrity, confidentiality and availability of information owned, controlled or processed by Smiths
• Develop, maintain and publish up-to-date security policies, standards and guidelines, and oversee training and dissemination of security policies and practices
• Create a framework for roles and responsibilities with regard to information ownership, classification, accountability and protection.
• Ensure that security programs are in compliance with relevant laws, regulations and policies to minimise or eliminate risk and audit findings (eg. NIST, ISO27001 and CESG 10 Steps)
• Understand and interact with stakeholders to ensure the consistent application of policies and standards across all technology projects, systems and services.
• Identify, develop and implement appropriate protective controls to protect Smiths from current and emerging Cyber Threats
• Provide Security thought leadership and support to the entire Information and Cyber Security Team and other stakeholders

Qualifications

• Four year degree (or equivalent) in related field with five or more years’ experience in information security including at least one years' direct experience with information security governance and compliance.
• Professional information security certifications such as CompTIA Security+, CASP, SSCP, CISSP, CISM, CCNA Security, CCNP Security, CEH, GIAC, or CISA required.
• In-depth knowledge of cyber security standards and requirements: ISO27001/2, NIST Cybersecurity Framework (800-53r4, 800-171r1, Risk Management), GDPR, etc.
• Knowledge of and direct experience with Governance, Risk, and Compliance (GRC) tools and processes
• Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security and risk-related concepts to technical and nontechnical audiences.
• Practical experience of Cyber security and related mitigating techniques, protective controls and measurements
• Creation of key security measurements, KPI’s and dashboard enabling senior stakeholders to gain a clear understanding of security posture.
• Experience of managing complex security related projects for both technologies and compliance.

Additional skills that are a plus:

• Abilty to get/reactivate DoD SECRET Clearance and DHS SSI
• High level Experience with full lifecycle software development across domains, including activities related to design, implementation, test and qualification of Software
• Embedded SW understanding, experience working on government programs
• Broad generalized IT experience
• Wireless systems integration experiences, including knowledge of cryptographic networking equipment
• Cloud AWS/Azure/etc.

Background: This position may require Sensitive Security Information (SSI) access and vetting via the TSA. If required, applicant must successfully pass a federal background investigation. This position may require a U.S. Personal Security Clearance.

SDI is a Federal Contractor and a drug-free workplace. By submitting an application, I confirm that I understand that the Company has a right to require me to submit to a drug test prior to employment and at any time during my employment, to the extent permitted by law.

Additional Information

We offer…

Join us and we’ll help build your career, with excellent training and opportunities for career growth across the business, both locally and globally. You’ll experience an inclusive environment, with strong leadership and a focus on safety and wellbeing. You’ll also have the flexibility to choose from a wide range of benefits to suit your lifestyle, offering you and your family support from a health and wellbeing, financial and lifestyle perspective.

Join us and work for a world-leader, with the benefits and training to reward your dedication and skills. Be part of a team where we are making the world a safer place.

Smiths Detection is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Equal Employment Opportunity Posters If you’d like to view a copy of the company’s affirmative action plan or policy statement, please email hr-1@smiths-detection.com.

The compensation for this position ranges from $97,000-146,880/yr and will vary depending on factors such as your location, skills, job-related knowledge, and experience. The compensation package may also include incentive compensation opportunities in the form of discretionary annual bonus or commissions. Smiths Detection provides comprehensive benefits including healthcare, 401K savings plan, company holidays, vacation, sick time, parental leave and an employee assistance program. Eligibility requirements apply.

If you have a disability and you believe you need a reasonable accommodation in order to search for a job opening or to submit an online application, please e-mail stat@smiths.com or call toll-free 877-703-1029. This email and phone number is created exclusively to assist disabled job seekers whose disability prevents them from being able to apply online. Only messages left for this purpose will be returned. Messages left for other purposes, such as following up on an application or technical issues not related to a disability, will not receive a response. Smiths Detection, Inc. participates in the Electronic Employment Verification Program.

We believe that different perspectives and backgrounds are what make a company flourish. All qualified applicants will receive equal consideration for employment regardless of race, colour, religion, sex, sexual orientation, gender identity, national origin, economic status, disability, age, or any other legally protected characteristics. We are proud to be an inclusive company with values grounded in equality and ethics, where we celebrate, support, and embrace diversity.

At no time during the hiring process will Smiths Group, nor any of our recruitment partners ever request payment to enable participation – including, but not limited to, interviews or testing. Avoid fraudulent requests by applying jobs directly through our career’s website (Careers - Smiths Group plc)