Cybersecurity – Information System Security Manager (ISSM)

Boeing • Berkeley, MO

1d • $130,900 - $177,100 • Onsite

About The Position

The Boeing Company’s Classified Cybersecurity team is seeking an Information System Security Manager (ISSM) in Berkeley, Missouri. The ISSM will use cybersecurity and Information Assurance (IA) expertise to provide technical leadership and support enterprise activities and Boeing customers across multiple classified computing domains. The role ensures that information system security policies, standards, and directives are enforced to support the assessment, authorization, and continued operation of systems that process classified information.

The ISSM leads security compliance, risk management, and continuous monitoring activities; guides staff; and works with government customers, suppliers, and Boeing personnel to implement protective mechanisms and maintain compliance with cybersecurity requirements. The position requires an active U.S. Top Secret security clearance and a current certification meeting IAM Level III requirements. The role may involve travel up to 10%.

Requirements

• Successfully completed a federal Tier 5 Investigation (T5), formerly SSBI, within the last 5 years, or have been enrolled in a Continuous Vetting program within the last 5 years.
• Currently hold an active certification in good standing satisfying IAM Level III, such as CISSP, GSLC, or CISM.
• At least 5 years of experience with cybersecurity policies and implementation of the Risk Management Framework, such as DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series.
• Willingness to travel up to 10%.
• Active U.S. Top Secret security clearance; a clearance active within the past 24 months is considered active.
• U.S. citizenship is required for the security clearance, and the role requires a U.S. Person under export control regulations.
• Successful completion of the company’s Conflict of Interest assessment process.
• Meet Boeing’s drug-free workplace testing requirements when applicable.

Nice To Haves

• At least 5 years of experience as an ISSO or ISSM supporting classified programs.
• At least 5 years of experience using security-relevant tools, systems, and applications supporting RMF, including NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS.
• At least 5 years of experience assessing and documenting test or analysis data to demonstrate cybersecurity compliance.

Responsibilities

• Analyze operational and development environments, threats, vulnerabilities, and internal interfaces to assess compliance with industry and government standards.
• Lead and implement Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems.
• Facilitate development of Memorandums of Understanding, Interconnection Security Agreements, and Risk Acknowledgement Letters, and support Continuous Monitoring (CONMON).
• Supervise configuration management of assigned systems and audit systems to verify security posture integrity.
• Lead staff in using assessment and test or analysis data to document compliance with security requirements.
• Conduct risk assessments and investigations, implement risk mitigations, and coordinate incident response activities.
• Conduct periodic hardware and software inventory assessments.
• Serve as an organization spokesperson on sophisticated projects and programs, and advise management and customers on technical research studies.
• Collaborate with government customers, suppliers, and company personnel to implement protective mechanisms and promote understanding of cybersecurity requirements.
• Supervise development and deployment of program information security for program systems in accordance with program and enterprise requirements, policies, standards, guidelines, and procedures.
• Manage an assigned team to facilitate effective execution of the RMF and provide guidance and mentoring to the team.
• Lead and perform security compliance continuous monitoring; coordinate and participate in security assessments and audits.
• Prepare, review, and present technical reports and briefings.
• Identify root causes, prioritize threats, and recommend or implement corrective actions.
• Track evolving industry knowledge and methods related to information security best practices.
• Lead development of enterprise-wide information security policies, standards, guidelines, and procedures that may span partner organizations.

Benefits

• Competitive base pay and variable compensation opportunities.
• Eligible employees may enroll in health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and programs providing paid and unpaid time away from work.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed