Cybersecurity – Information System Security Manager (ISSM)

Boeing • Herndon, VA

1d

About The Position

The Boeing Company is seeking an Information System Security Manager (ISSM) to join its team in Herndon, Virginia. The selected candidate will serve as a technical leader, using cybersecurity and Information Assurance (IA) expertise to support enterprise activities and Boeing customers across multiple classified computing domains. The ISSM ensures that information system security policies, standards, and directives are enforced to support the assessment, authorization, and continued operation of systems processing classified information.

The position oversees information security development and deployment for program systems, manages a team supporting the Risk Management Framework (RMF), and leads compliance monitoring, security assessments, and audits. It also contributes to enterprise-wide security policies and procedures, advises stakeholders on risks and corrective actions, and prepares and presents technical reports and briefings. Travel is expected to be 10%–20% of the time. The position requires an active U.S. Top Secret/SCI security clearance and U.S. citizenship. Relocation may be available based on candidate eligibility. The role is not contingent upon a program award and is not safety sensitive.

Requirements

• Successfully completed a federal Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI), within the last five years, or have been enrolled in a Continuous Vetting program within the last five years.
• Currently hold, in good standing, a certification satisfying IAM Level III: CISSP, GSLC, or CISM.
• At least 5 years of combined experience and education in IT, cybersecurity, or related fields.
• At least 3 years of experience using security-relevant tools, systems, and applications in support of RMF, including NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS.
• At least 3 years of cybersecurity leadership experience overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance.
• At least 3 years of experience communicating complex technical risks, translating their impact, and advising senior leaders.
• Experience with cybersecurity policies and RMF implementation, such as DAAPM, CNSSI 1253, ICD-503, JSIG, or the NIST SP 800 series.
• Ability to travel 10%–20% of the time.
• Active U.S. Top Secret/SCI security clearance; a U.S. security clearance active within the past 24 months is considered active.
• U.S. citizenship is required for the security clearance; the role also requires a U.S. Person under export control rules.
• Successful completion of the company's Conflict of Interest assessment process.

Nice To Haves

• At least 5 years of experience as an Information System Security Officer (ISSO) or Information System Security Manager (ISSM) supporting classified programs.
• At least 5 years of experience using security-relevant tools, systems, and applications in support of RMF, including NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS.
• At least 5 years of cybersecurity leadership experience overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance.
• At least 5 years of experience communicating complex technical risks, translating their impact, and advising senior leaders.

Responsibilities

• Oversee development and deployment of program information security for program systems across multiple locations, ensuring alignment with program and enterprise requirements, policies, standards, guidelines, and procedures.
• Manage the assigned team to facilitate effective execution of the Risk Management Framework (RMF).
• Provide guidance and coaching to the Information Security team.
• Manage and perform security compliance continuous monitoring.
• Oversee and participate in security assessments and audits.
• Prepare, review, and present technical reports and briefings.
• Identify root causes, prioritize threats, and recommend or implement corrective actions.
• Explore enterprise and industry developments for evolving information security knowledge and best practices.
• Lead development of enterprise-wide information security policies, standards, guidelines, and procedures that may span multiple stakeholder organizations.

Benefits

• Eligible employees may enroll in health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life insurance, and disability insurance programs.
• Programs providing paid and unpaid time away from work.
• Competitive base pay and variable compensation opportunities.
• Relocation assistance based on candidate eligibility.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed