Apply on Employer Site

Boeing · 17 hours ago

Cybersecurity – Information System Security Officer (ISSO)

USA - Oklahoma City, OK

Full-time

Onsite

Mid Level

$98K/yr - $132K/yr

3+ years exp

The Boeing Company is seeking a highly motivated Cybersecurity – Information System Security Officer (ISSO) to join their team in Oklahoma City, OK. The ISSO will be responsible for maintaining and implementing Information System Security policies and ensuring the security of classified information systems.

AerospaceIndustrial

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Assist in the development and deployment of program information security for assigned systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures

Implement Risk Management Framework (RMF) processes, product development and product maintenance for assigned systems

Perform security compliance continuous monitoring

Participate in security assessments and audits

Prepare and present technical reports and briefings

Identify root causes, the prioritization of threats, and recommend/implement corrective action

Provide mentoring and technical leadership within the information security program team

Explore the enterprise and industry for the evolving state of industry knowledge and methods regarding information security standard methodologies

Support development of enterprise-wide information security policies, standards, guidelines and procedures that may reach across multiple partner organizations

Support Defense Federal Acquisition Regulation Supplement (DFARS) and Cybersecurity Maturity Model Certification (CMCC) requirements based on contractual requirements for assigned programs

Qualification

IAM Level 1 certificationRisk Management Framework (RMF)Cybersecurity policiesNESSUSDISA STIGsCISMSecurity assessmentsCompliance monitoringTechnical leadership

Required

IAM Level 1 DoD 8140.01 (previously 8570.01) compliant certification (i.e. CAP, Security+ CE, CISSP, CASP, CISM, GSLC)

3+ years of experience in cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series

Preferred

3+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs

3+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS

3+ years of experience assessing and documenting test or analysis data to show cyber security compliance