Site Lead - Information Systems Security Manager (ISSM) - Andover, MA

Date Posted:

2026-05-13

Country:

United States of America

Location:

US-MA-ANDOVER-AN5 ~ 356 Lowell St ~ AN5 BRISTOL BLDG

Position Role Type:

Onsite

U.S. Citizen, U.S. Person, or Immigration Status Requirements:

Active and transferable U.S. government issued security clearance is required prior to start date.​ U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance​

Security Clearance Type:

Secret - Current

Security Clearance Status:

Active and existing security clearance required on day 1

At RTX, the world largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world.

Raytheon brings the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today’s mission and stay ahead of tomorrow’s threat. We deliver solutions that help our nation and allies defend freedoms and deter aggression, creating a safer, more secure world. Join us and help shape the future of aerospace and defense.

Our cybersecurity team, is seeking a Site Lead and Information System Security Manager (ISSM) to support our classified computing environments 100% onsite at our facility in Andover, Massachusetts.

This role is for the ISSM of Record for all information systems within the Andover, Massachusetts site and is responsible for leading a layered team providing cybersecurity support across multiple security environments. This managerial role manages policy, compliance, operations, security awareness and/or other cybersecurity resources or functions. You will provide advice and counsel on risk levels, security posture and implications of new technologies or technology upgrades. You will interface and disseminate necessary cyber event information to appropriate internal & external organizations and audiences. Additionally, you will manage alignment of cybersecurity priorities with the organization's business strategy and compliance requirements as well as monitor and evaluate the effectiveness of the enterprise's or enclave’s information assurance security safeguards to ensure they provide the intended level of protection. 

IMPORTANT NOTE: Within six months of hire date, you must obtain and maintain a Security professional certification commensurate with a DoD 8570.01-M IAM level III certified credentials (CISSP, CISM, GSLC or CCISO), if you do not already have this certification.

What You Will Do

• ISSM of record for all information systems within the site, appointed in writing by Cybersecurity leadership to the Cognizant Security Agency (CSA)
• Focal point of contact for partnering departments and Customers at the site level
• Participates in interdepartmental projects and provides council on Cybersecurity policy and procedures
• Senior Manager with direct supervision of front-line managers
• Trains and mentors subordinates, provides recurring performance feedback
• Interfaces with internal and external Security personnel, customers, management, and U.S. Government representatives
• Conducts training, briefings, presentations for multiple levels of the business
• Business travel as needed up to 20%
• Perform other duties as assigned by the cybersecurity leadership team

Qualifications You Must Have

• Typically requires a University Degree with 10 years of experience as described in bullet below or an advanced degree with 7 years of relevant experience
• Relevant experience consists of any combination:
  • Cybersecurity, systems security or hardening
  • Information Technology
  • Experience with network security and/or systems security, which includes any of the following: architecture, topology, protocols, components, and/or principles 
  • Experience with configuring and/or auditing operating systems
  • Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Process Manual (DAAPM), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), SNAC guides, Nessus, SCAP, ICD-503, ACAS and/or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPPA
  • Physical security/security, policework/criminal justice, investigations, or Border Patrol
  • Project or program management, or account management