Senior Information System Security Officer (ISSO) - Plano, TX
About The Position
RTX is seeking a Senior Information Systems Security Officer (ISSO) to support its cybersecurity team onsite at its Plano, Texas facility. The role interfaces with the Information Systems Security Manager (ISSM) to help ensure compliance with applicable NIST Special Publications, customer directives, company policies, NISPOM Chapter 8, DAAPM, and JSIG policies. The position assesses and monitors system compliance, conducts audits and technical and administrative assessments, supports security plan development, and delivers information systems security education and awareness. It also investigates information system security violations, helps prepare reports describing corrective and preventative actions, reviews and approves configuration management requests within the employee’s authority, integrates cybersecurity processes, procedures, and tools, and supports cybersecurity documentation and technical writing. Employees who do not already hold an appropriate certification must obtain and maintain a security professional certification commensurate with IAM Level I, such as Security+, within six months of hire. An active and transferable U.S. government-issued Top Secret security clearance is required before the start date and must be active on day one; U.S. citizenship is required for clearance eligibility.
Requirements
- Typically requires a university degree or equivalent experience and at least 5 years of relevant experience, or an advanced degree in a related field and at least 3 years of experience.
- Relevant experience may include cybersecurity, systems security, or system hardening.
- Relevant experience may include IT compliance-based auditing using RMF, DAAPM, JSIG, NISPOM, or non-defense standards and regulations such as FAA, PCI, ISO 9001, or HIPPA.
- Relevant experience may include working with or supporting computer technologies such as databases, operating systems, computer network hardware, software programs, hardware troubleshooting, or electronics.
- Relevant experience may include physical security, security, police work or criminal justice, investigations, or Border Patrol.
- Relevant experience may include project or program management, office management, senior administration, or account management.
- Must have an active and transferable U.S. government-issued Top Secret security clearance before the start date; the clearance must be active and existing on day one.
- U.S. citizenship is required because only U.S. citizens are eligible for a security clearance.
- Must obtain and maintain a security professional certification commensurate with IAM Level I certification, such as Security+, within six months of hire if not already certified.
Nice To Haves
- Experience working in DoD classified operating or laboratory environments.
- Experience with information system security tools addressing vulnerability analysis and mitigation, such as Splunk, Forcepoint, Ivanti, Tenable, ACAS, or HBSS.
- Familiarity implementing government directives and policies derived from NIST, CNSSI, DoD, or other government regulatory compliance standards in a professional industry.
- Experience executing Assessment and Authorization processes under the Risk Management Framework (RMF).
- Experience providing technical security consultation for complex, cross-domain, heterogeneous classified network environments in collaboration with customers and IT teams.
- Familiarity with large, multi-facility networks and complex components, including Windows and Linux environments.
- Experience interpreting, implementing, and assessing DISA STIGs.
- Familiarity with executing and managing cyber incident response, including preservation, containment, and eradication.
Responsibilities
- Assess and monitor information system compliance.
- Conduct audits and support security plan development.
- Deliver information systems security education and awareness.
- Investigate information system security violations and help prepare reports specifying corrective and preventative actions.
- Review and approve configuration management requests within the scope of assigned authority.
- Conduct technical and administrative assessments.
- Integrate new cybersecurity processes, procedures, and tools.
- Support the creation, review, and updating of cybersecurity documentation and other technical writing.
- Interface with the Information Systems Security Manager (ISSM) to support adherence to applicable standards, customer directives, and company policies.
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- Short-term disability insurance
- Long-term disability insurance
- 401(k) match
- Flexible spending accounts
- Flexible work schedules
- Employee assistance program
- Employee Scholar Program
- Parental leave
- Paid time off
- Holidays
- Potential eligibility for annual short-term and/or long-term incentive compensation programs, subject to applicable terms and performance factors
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
