Cybersecurity – Information System Security Manager (ISSM)

Boeing•Seal Beach, CA

2d•$140,250 - $189,750•Onsite

About The Position

Boeing Classified Cybersecurity is currently seeking a highly motivated Cybersecurity – Information System Security Manager (ISSM) to join the team in Seal Beach, CA. The selected candidate will rely on cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSM is responsible for ensuring all Information System Security policies, standards, and directives are enforced to support assessment, authorization and continued operation of information systems processing classified information.

Requirements

Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years
Currently holds certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM) or have the ability to obtain IAM Level III within 6 months
5+ years of combined experience and education in IT, cybersecurity, or related fields
3+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS
3+ years of experience with cybersecurity leadership overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance
3+ years of experience communicating complex technical risks, translating impact, and advising senior leaders
Experience in cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series
Ability to travel 10% - 20% of the time
This position requires an active U.S. Top Secret/SCI Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)
Employer will not sponsor applicants for employment visa status.

Nice To Haves

5+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs
5+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS
5+ years of experience cybersecurity leadership overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance.
5+ years of experience communicating complex technical risks, translating impact, and advising senior leaders.

Responsibilities

Performs security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards
Leads and implements the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems
Facilitates development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON)
Oversees configuration management of assigned systems; auditing systems to ensure security posture integrity
Leads staff with assessments and test/analysis data to document state of compliance with security requirements
Conducts risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities
Conducts periodic hardware/software inventory assessments
Serves as organization spokesperson on advanced projects and programs
Acts as advisor to management and customers on advanced technical research studies
Interfaces with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements