Cybersecurity – Information System Security Manager (ISSM)
About The Position
The Boeing Company is seeking a Cybersecurity – Information System Security Manager (ISSM) to join its team in Herndon, Virginia. The selected candidate will use their cybersecurity and Information Assurance (IA) background to provide technical leadership and support enterprise activities and Boeing customers across multiple classified computing domains. The ISSM ensures that Information System Security policies, standards, and directives are enforced to support assessment, authorization, and continued operation of information systems that process classified information. This role oversees development and deployment of program information security across program systems and locations, manages a team supporting effective Risk Management Framework (RMF) execution, and leads security compliance and continuous monitoring. The ISSM also contributes to assessments and audits, communicates technical findings, identifies and addresses security risks, and develops enterprise-wide information security policies and guidance. The position requires an active U.S. Top Secret/SCI clearance and U.S. citizenship, and requires travel 10%–20% of the time.
Requirements
- Successfully completed a Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI), within the last five years, or have been enrolled in a Continuous Vetting program within the last five years.
- Currently hold an IAM Level III certification in good standing, such as CISSP, GSLC, or CISM.
- Five or more years of combined experience and education in IT, cybersecurity, or related fields.
- Three or more years of experience using security-relevant tools, systems, and applications in support of RMF, including NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS.
- Three or more years of cybersecurity leadership experience overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance.
- Three or more years of experience communicating complex technical risks, translating their impact, and advising senior leaders.
- Experience with cybersecurity policies and RMF implementation, such as DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series.
- Ability to travel 10%–20% of the time.
- Active U.S. Top Secret/SCI security clearance; a U.S. security clearance active within the past 24 months is considered active.
- U.S. citizenship is required for the security clearance; the position also requires a U.S. Person under U.S. export control regulations.
- Successful completion of the Company’s Conflict of Interest (COI) assessment process.
Nice To Haves
- Five or more years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs.
- Five or more years of experience using security-relevant tools, systems, and applications in support of RMF, including NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS.
- Five or more years of cybersecurity leadership experience overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance.
- Five or more years of experience communicating complex technical risks, translating their impact, and advising senior leaders.
Responsibilities
- Oversee development and deployment of program information security across program systems and multiple locations to meet program and enterprise requirements, policies, standards, guidelines, and procedures.
- Manage an assigned team to facilitate effective execution of the Risk Management Framework (RMF).
- Provide guidance and coaching to the Information Security team.
- Manage and perform security compliance continuous monitoring.
- Oversee and participate in security assessments and audits.
- Prepare, review, and present technical reports and briefings.
- Identify root causes, prioritize threats, and recommend and/or implement corrective actions.
- Explore enterprise and industry developments in information security knowledge and best practices.
- Lead development of enterprise-wide information security policies, standards, guidelines, and procedures across stakeholder organizations.
Benefits
- Eligible employees may enroll in health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life insurance, and disability insurance programs.
- Programs providing paid and unpaid time away from work.
- Competitive base pay and variable compensation opportunities.
- Relocation is offered based on candidate eligibility.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
Education Level
No Education Listed
