Information Systems Security Manager

Kranze Technology Solutions, Inc., a defense engineering leader in avionics, electronic warfare, and tactical communications, seeks an Information Systems Security Manager to own and mature our cyber and information security program. In a highly collaborative, engineering-driven culture, you'll secure mission-critical manufacturing and defense systems, lead risk assessments, vulnerability management, and incident response, and drive NIST/RMF and DFARS/CMMC compliance. Partner with expert engineers to implement technical controls, harden networks, and protect sensitive data in support of U.S. warfighters.

Responsibilities

• Lead the information security program for manufacturing and defense systems, ensuring compliance with Do
• D and industry standards
• Develop, implement, and maintain security policies, procedures, and technical controls for networks, applications, and endpoints
• Manage vulnerability assessments, penetration testing, and remediation across avionics, EW, and communications environments
• Oversee incident response, investigation, containment, and reporting for cyber and information security events
• Administer and improve access control, identity management, encryption, and monitoring solutions
• Coordinate security requirements with engineering, IT, program management, and defense customers
• Conduct risk assessments, security audits, and continuous monitoring for classified and sensitive systems
• Train and mentor staff on cybersecurity best practices, secure development, and data protection
• Support accreditation, ATO, and compliance activities for defense programs (NIST, RMF, DFARS/CMMC)
• Evaluate and implement new security tools, architectures, and processes to protect mission-critical systems

Required Skills

• Information security management
• NIST cybersecurity framework
• NIST RMFDFARS/CMMC compliance
• Network security architecture
• Vulnerability assessment and remediation
• Incident response and forensics
• Identity and access management (IAM)
• SIEM and security monitoring
• Risk assessment and management