Cybersecurity – Information System Security Manager (ISSM)

Boeing•Berkeley, MO

2d•$130,900 - $177,100•Onsite

About The Position

The Boeing Company is seeking a highly motivated Cybersecurity – Information System Security Manager (ISSM) to join its Classified Cybersecurity team in Berkeley, Missouri. The selected candidate will use cybersecurity and Information Assurance experience to provide technical leadership and support enterprise activities and Boeing customers across multiple classified computing domains. The ISSM ensures that information system security policies, standards, and directives are enforced so that systems processing classified information can be assessed, authorized, and operated continuously. The position leads and supports Risk Management Framework processes, security compliance and continuous monitoring, configuration management, risk assessment, incident response, and security audits. It also provides guidance to staff and advises management and customers on technical studies and sophisticated projects. The role requires an active U.S. Top Secret Security Clearance and a U.S. Person as defined by export control regulations. Candidates must satisfy Boeing's Conflict of Interest assessment process. The role may require travel up to 10%.

Requirements

Successfully completed a Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI), by the federal government within the last 5 years, or have been enrolled in a Continuous Vetting program within the last 5 years.
Currently hold an active certification in good standing that satisfies IAM Level III, such as CISSP, GSLC, or CISM.
At least 5 years of experience with cybersecurity policies and implementation of the Risk Management Framework, such as DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series.
Willingness to travel up to 10%.
Must have an active U.S. Top Secret Security Clearance; a clearance active within the past 24 months is considered active.
Must be a U.S. Person as defined by 22 C.F.R. §120.62 to meet U.S. export control requirements.
Must satisfy the Company's Conflict of Interest assessment process.

Nice To Haves

At least 5 years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs.
At least 5 years of experience using security-relevant tools, systems, and applications in support of the Risk Management Framework, including NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS.
At least 5 years of experience assessing and documenting test or analysis data to demonstrate cybersecurity compliance.

Responsibilities

Analyze operational and development environments, threats, vulnerabilities, and internal interfaces to assess compliance with industry and government standards.
Lead and implement Assessment and Authorization processes under the Risk Management Framework for new and existing information systems.
Facilitate development of Memorandums of Understanding, Interconnection Security Agreements, and Risk Acknowledgement Letters, and support Continuous Monitoring.
Supervise configuration management of assigned systems and audit systems to verify security posture integrity.
Lead staff in assessments and use test and analysis data to document compliance with security requirements.
Conduct risk assessments and investigations, implement risk mitigations, and coordinate incident response activities.
Conduct periodic hardware and software inventory assessments.
Serve as the organization's spokesperson on sophisticated projects and programs.
Advise management and customers on sophisticated technical research studies.
Collaborate with government customers, suppliers, and company personnel to implement protective mechanisms and ensure understanding of and compliance with cybersecurity requirements.
Supervise development and deployment of program information security for program systems to meet program and enterprise requirements, policies, standards, guidelines, and procedures.
Manage an assigned team to facilitate effective execution of the Risk Management Framework.
Guide and mentor the Information Security support team.
Lead and perform security compliance continuous monitoring.
Coordinate and participate in security assessments and audits.
Prepare, review, and present technical reports and briefings.
Identify root causes, prioritize threats, and recommend or implement corrective action.
Monitor enterprise and industry developments in information security best practices.
Lead development of enterprise-wide information security policies, standards, guidelines, and procedures that may span multiple partner organizations.