Information Security Manager
About the job
- Bachelor’s degree in Computer Science, Cybersecurity, Management Information Systems, or a related field.
- Seven to ten or more years of experience in information security, including at least three years in a leadership or management capacity.
- Proven experience in a software development or Software as a Service environment.
- Familiarity with cloud security across Amazon Web Services, Microsoft Azure, or Google Cloud Platform, containerization, and automated security testing tools.
- Ability to lead technical teams and influence organizational change without direct authority.
- Expertise analyzing evolving cyber threats and designing scalable mitigation strategies.
- Ability to translate technical security vulnerabilities into business-impact terms for executive stakeholders.
- Deep understanding of software-relevant compliance standards, including National Institute of Standards and Technology, System and Organization Controls, and International Organization for Standardization standards.
- Ability to anticipate future security trends and prepare the organization accordingly.
- Ability to work in a fast-paced environment and remain calm during active security incidents.
- Strong attention to detail in security policy and implementation.
- Ability to balance strict security controls with developers’ operational needs.
- Design and manage the enterprise-wide information security strategy, aligning security initiatives with software development lifecycles and business goals.
- Lead comprehensive risk assessments and vendor security reviews to identify and mitigate vulnerabilities across third-party integrations and internal systems.
- Collaborate with engineering leads to integrate static application security testing and dynamic application security testing into continuous integration and continuous delivery pipelines.
- Oversee the security incident response program and act as the primary escalation point and lead investigator during high-priority security events.
- Ensure continuous compliance with SOC 2, ISO 27001, and GDPR, including managing external audits and certification processes.
- Develop and lead security training programs for non-technical staff and secure-coding workshops for developers.
- Present regular security posture reports to senior management and board members, providing data-driven recommendations for security investments.
- Maintain the confidentiality, integrity, and availability of software as a service platforms and customer data environments.
- Implement security controls across software development and deployment processes to minimize organizational risk.
- Achieve and maintain security certifications such as SOC 2 Type II, ISO 27001, and NIST, while complying with parent-company policies.
- Foster a proactive security-first mindset across departments through education and transparent reporting.
- Travel occasionally between the Orlando and Pittsburgh offices and to security conferences or audits.
- A master’s degree in a specialization such as information technology security.
- Certified Information Systems Security Professional or Certified Information Security Manager certification.
About the company
What they do: BAE Systems OneArc USA, Inc. develops synthetic training environments and battle-space simulations for defense, serving the U.S. and NATO governments and allied militaries with ready-made products and solutions. How their product works: They combine synthetic environments, geospatial data, interoperability, data analytics, and AI to simulate modern threats across land, air, sea, space, and cyber, enabling rapid development and scalable training that can be used across multiple services and nations. How they differ from competitors: They bring more than 30 years of experience in military simulation, have helped set NATO interoperability standards, and have built trust with more than 60 nations, offering established, field-tested systems that emphasize interoperability and quick deployment. What their goal is: to provide decision advantage and mission success by delivering effective, scalable training and simulation capabilities to militaries worldwide.
Company Size
201-500
Company Stage
N/A
Total Funding
N/A
Headquarters
N/A
Founded
N/A
Get referred to BAE Systems OneArc USA, Inc
See people who can refer or advise you
Simplify's Take
What believers are saying
- FDIA at Fort Hood validates procurement, precision gunnery, and platform qualification workflows.
- OneArc’s Sept. 2026 Norwegian Armed Forces VBS4 win broadens international training revenue.
- BAE’s Sept. 2026 Army and Navy awards reinforce cross-program credibility and follow-on sales.
What critics are saying
- OneArc sells through BAE, so Army budget shifts or primes can squeeze pricing.
- If the Army standardizes embedded training internally, OneArc becomes replaceable by 2028.
- A failed Fort Hood evaluation kills fleet rollout and leaves ECT a one-off demo.
What makes BAE Systems OneArc USA, Inc unique
- Sept. 17, 2026, OneArc placed the Army’s first commercial embedded trainer inside combat vehicles.
- ECT trains crews on operational controls, cutting simulator-facility dependence and logistics.
- VBS4 and ECT span crew qualification, platoon training, and distributed maneuver.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Remote Work Options
Company News
BAE Systems OneArc has secured an Other Transaction Agreement contract from the US Army to integrate its Embedded Collective Training solution on combat vehicles at Fort Hood, Texas. This marks the first commercially available embedded trainer installed in a US Army combat vehicle. The system allows soldiers to train directly on their operational vehicles without relying on fixed simulator facilities. Army crews will use the technology for precision gunnery progression tasks and platform qualification during the Force Development Innovation & Assessment event. The deployment addresses a longstanding gap where embedded training typically arrives years after a platform enters service. By integrating commercial training technology directly onto combat platforms, the Army aims to pair new equipment with training capability from deployment, rather than treating training as a follow-on programme. The solution is designed to scale from individual crew training to platoon-level collective training and can extend to other ground platforms.