Cybersecurity – Information System Security Officer (ISSO)

Boeing•Oklahoma City, OK

1d•$97,750 - $132,250•Onsite

About The Position

Cybersecurity – Information System Security Officer (ISSO) Company: The Boeing Company East Region Classified Cybersecurity is currently seeking a highly motivated Cybersecurity – Information System Security Officer (ISSO) to join the team in Oklahoma City, OK. The selected candidate will rely on Cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The Cybersecurity - ISSO is responsible for maintaining and implementing all Information System Security policies, standards, and directives to ensure assessment and authorization of information systems processing classified information.

Requirements

IAM Level 1 DoD 8140.01 (previously 8570.01) compliant certification (i.e. CAP, Security+ CE, CISSP, CASP, CISM, GSLC)
3+ years of experience in cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series
This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)
To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.

Nice To Haves

Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC or CISM)
3+ years of experience as an Information System Security Officer (ISSO) or Information System Security Manager (ISSM) supporting classified programs
3+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS
3+ years of experience assessing and documenting test or analysis data to show cyber security compliance

Responsibilities

Assist in the development and deployment of program information security for assigned systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures
Implement Risk Management Framework (RMF) processes, product development and product maintenance for assigned systems
Perform security compliance continuous monitoring
Participate in security assessments and audits
Prepare and present technical reports and briefings
Identify root causes, the prioritization of threats, and recommend/implement corrective action
Provide mentoring and technical leadership within the information security program team
Explore the enterprise and industry for the evolving state of industry knowledge and methods regarding information security standard methodologies
Support development of enterprise-wide information security policies, standards, guidelines and procedures that may reach across multiple partner organizations
Support Defense Federal Acquisition Regulation Supplement (DFARS) and Cybersecurity Maturity Model Certification (CMCC) requirements based on contractual requirements for assigned programs