Cybersecurity – Information System Security Manager (ISSM)

Boeing Classified Cybersecurity is seeking a highly motivated Cybersecurity – Information System Security Manager (ISSM) to join the team in Berkeley, MO.

The selected candidate will rely on their cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSM is responsible for ensuring all Information System Security policies, standards, and directives are enforced to support assessment, authorization, and continued operation of information systems processing classified information.

Position Responsibilities:

• Perform security analysis of operational and development environments, threats, vulnerabilities, and internal interfaces to define and assess compliance with accepted industry and government standards.
• Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems.
• Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL), and support Continuous Monitoring (CONMON).
• Supervise configuration management of assigned systems; auditing systems to ensure security posture integrity.
• Lead staff with assessments and test/analysis data to document the state of compliance with security requirements.
• Conduct risk assessments and investigations, implement appropriate risk mitigations, and coordinate incident response activities.
• Conduct periodic hardware/software inventory assessments.
• Serve as an organization spokesperson on sophisticated projects and programs.
• Act as an advisor to management and customers on sophisticated technical research studies.
• Collaborate with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and ensure understanding of and compliance with cybersecurity requirements.

Additional Responsibilities:

• Supervise the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines, and procedures.
• Handle assigned team to facilitate effective execution of Risk Management Framework (RMF).
• Provide guidance and mentorship to support teams within Information Security.
• Lead and perform security compliance continuous monitoring.
• Coordinate and participate in security assessments and audits.
• Prepare, review, and present technical reports and briefings.
• Identify root causes, prioritize threats, and recommend and/or implement corrective action.
• Explore the enterprise and industry for evolving state-of-the-art knowledge and methods regarding information security best practices.
• Lead the development of enterprise-wide information security policies, standards, guidelines, and procedures that may reach across multiple partner organizations.

Basic Qualifications (Required Skills/Experience):

• Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI), by the federal government within the last 5 years, or requires the candidate to have been enrolled in a Continuous Vetting program within the last 5 years.
• Currently holds certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM).
• 5+ years of experience with cybersecurity policies and implementation of Risk Management Framework (RMF): e.g., DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series.
• Willing to travel up to 10%.

Preferred Qualifications (Desired Skills/Experience):

• 5+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs.
• 5+ years of experience utilizing security-relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS.
• 5+ years of experience assessing and documenting test or analysis data to show cybersecurity compliance.

Benefits:

• Competitive base pay and variable compensation opportunities.
• Eligible employees can enroll in various benefit programs, including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and more.