Cybersecurity - Senior Information System Security Manager (ISSM) Sign on Bonus Potential

Boeing•Berkeley, MO

8d•$193,800 - $262,200•Onsite

About The Position

The Boeing Company is seeking a highly talented, motivated, and creative cybersecurity professional to join their Enterprise Classified Security team as a Cybersecurity – Senior Information System Security Manager (ISSM) in Berkeley, MO. The selected candidate will leverage their cybersecurity and Information Assurance (IA) background to serve as a technical leader supporting Enterprise activities and Boeing customers across multiple classified computing domains. The ISSM is responsible for ensuring the enforcement of all Information System Security policies, standards, and directives to support the assessment, authorization, and continued operation of information systems processing classified information. This role directly supports Air Dominance (AD) programs and is contingent upon award.

Requirements

Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years.
Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM).
10+ years of experience in cybersecurity.
10+ years of experience in cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series.
5+ years of experience with software evaluations and hardening (software installations, code reviews, and approvals).
U.S. Citizenship Required.
Active U.S. Top Secret Security Clearance (A U.S. Security Clearance that has been active in the past 24 months is considered active).

Nice To Haves

10+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs.
10+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS.
10+ years of experience assessing and documenting test or analysis data to show cyber security compliance.
10+ years of experience in project management.
5+ years of experience in a leadership role leading teams, initiatives, or projects to meet business objectives and influence change.
Excellent problem-solving skills and the ability to think critically and strategically.
Strong communication and interpersonal skills, with the ability to work collaboratively in a team environment.

Responsibilities

Provides technical guidance and mentorship to program leadership, fostering a culture of innovation and continuous improvement.
Leads the effort to develop and document best practices and methodologies for cybersecurity operations to ensure consistency and quality across the organization.
Communicates effectively with stakeholders to gather requirements, present architectural designs, and provide updates on project progress.
Works closely with cross-functional teams, including development, operations, and product management, to ensure alignment on project goals and deliverables.
Assists in design and implementation of scalable, secure, and efficient cloud-based architectures that align with business objectives and enhance operational capabilities.
Provides guidance when migrating from on-premises to cloud-based solutions.
Utilizes cybersecurity principles to analyze existing systems and processes, identifying areas for optimization and waste reduction to improve overall efficiency.
Defines, collects, analyzes, and refines Key Performance Indicators (KPIs) and metrics for cybersecurity deliverables and team execution to ensure continuous improvement and accountability.
Stays current with industry trends, emerging technologies, and best practices in cloud computing, cybersecurity requirements, DevOps, and applies this knowledge to enhance solutions.
Applies an interdisciplinary, collaborative approach to lead activities to strategize, plan, design, develop and verify highly-complex security solutions to meet enterprise needs.
Provides strategic guidance and consultation on enterprise execution of the Risk Management Framework (RMF), security compliance and monitoring, the delivery of technical reports/briefings, root cause analysis and resolution, and information security policy, standards, guidelines, and procedure development/implementation.
Oversees, develops, designs, and conducts research that results in new requirements management methodologies or unique approaches that mitigate assessment and review findings.
Provides mentoring and technical leadership to the information security enterprise community for developing and enhancing security solutions.
Integrates technical, cost, value, and risk considerations into the secure product definition.
Explores and shapes industry knowledge and methods, tools, and processes applicable to security solutions.
Represents the company in industry or academic forums.
Advises management on a wide range of high leverage information security-related matters.
Interfaces with appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements.
Prepares, reviews, and presents technical reports and briefings.
Identifies root causes, prioritizes threats, and recommends and/or implements corrective action.
Explores the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices.