This job has closed.

Boeing · 7 hours ago

Cybersecurity – Information System Security Manager (ISSM)

Berkeley, MO

Full-time

Onsite

Senior Level

$131K/yr - $177K/yr

5+ years exp

Boeing is an innovative company committed to fostering a welcoming and inclusive environment. They are seeking a Cybersecurity – Information System Security Manager (ISSM) to lead cybersecurity efforts and ensure compliance with security policies for classified information systems.

AerospaceIndustrial

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards

Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems

Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON)

Supervise configuration management of assigned systems; auditing systems to ensure security posture integrity

Lead staff with assessments and test/analysis data to document state of compliance with security requirements

Conduct risk assessments and investigations, implement appropriate risk mitigations, and coordinate incident response activities

Conduct periodic hardware/software inventory assessments

Serve as organization spokesperson on sophisticated projects and programs

Act as advisor to management and customers on sophisticated technical research studies

Collaborate with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements

Supervise the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures

Handle assigned team to facilitate effective execution of Risk Management Framework (RMF)

Provide guidance and mentor to support team within Information Security

Lead and perform security compliance continuous monitoring

Coordinate and participate in security assessments and audits

Prepare, review, and present technical reports and briefings

Identify root causes, prioritize threats and recommend and/or implement corrective action

Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices

Lead development of enterprise-wide information security policies, standards, guidelines and procedures that may reach across multiple partner organizations

Qualification

Risk Management Framework (RMF)Cybersecurity leadershipInformation Assurance (IA)CISSP certificationSecurity tools proficiencyIncident response coordinationTechnical communicationTeam mentoring

Required

Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years

Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)

5+ years of combined experience and/or education in cybersecurity, IT, or a related field

5+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation (e.g., DAAG, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series)

5+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS

3+ years of experience with cybersecurity leadership overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance

3+ years of experience communicating complex technical risks, translating impact, and advising senior leaders

This position requires an active U.S. Top Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)

This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a 'U.S. Person' as defined by 22 C.F.R. 120.62 is required. 'U.S. Person' includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee