Cybersecurity – Senior Information System Security Manager (ISSM)

Cybersecurity – Senior Information System Security Manager (ISSM)

Company:

The Boeing Company

The Boeing Company is looking for a highly talented, motivated, and creative cybersecurity professional to join our Enterprise Classified Security team as a Cybersecurity - Senior Information System Security Manager (ISSM) based in Hazelwood, MO.

The selected candidate will rely on cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSM is responsible for ensuring all Information System Security policies, standards, and directives are enforced to support assessment, authorization and continued operation of information systems processing classified information.

Position Responsibilities:

• Provides technical guidance and mentorship to program leadership, fostering a culture of innovation and continuous improvement

• Leads the effort to develop and document best practices and methodologies for cybersecurity operations to ensure consistency and quality across the organization

• Communicates effectively with stakeholders to gather requirements, present architectural designs, and provide updates on project progress

• Works closely with cross-functional teams, including development, operations, and product management, to ensure alignment on project goals and deliverables

• Assists in design and implementation of scalable, secure, and efficient cloud-based architectures that align with business objectives and enhance operational capabilities

• Provides guidance when migrating from on-premises to cloud-based solutions

• Utilizes cybersecurity principles to analyze existing systems and processes, identifying areas for optimization and waste reduction to improve overall efficiency

• Defines, collects, analyzes, and refines Key Performance Indicators (KPIs) and metrics for cybersecurity deliverables and team execution to ensure continuous improvement and accountability

• Stays current with industry trends, emerging technologies, and best practices in cloud computing, cybersecurity requirements, DevOps, and apply this knowledge to enhance our solutions

Additional Responsibilities:

• Applies an interdisciplinary, collaborative approach to lead activities to strategize, plan, design, develop and verify highly-complex security solutions to meet enterprise needs

• Provides strategic guidance and consultation on enterprise execution of the Risk Management Framework (RMF), security compliance and monitoring, the delivery of technical reports/briefings, root cause analysis and resolution and information security policy, standards, guidelines and procedure development/implementation

• Oversees, develops, designs and conducts research that results in new requirements management methodologies or results in unique approaches that mitigate assessment and review findings

• Provides mentoring and technical leadership to the information security enterprise community for developing and enhancing security solutions

• Integrates technical, cost, value and risk considerations into the secure product definition

• Explores and shapes industry knowledge and methods, tools and processes applicable to security solutions

• Represents the company in industry or academic forums

• Advises management on a wide range of high leverage information security-related

• Interfaces with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements

• Prepares, reviews, and presents technical reports and briefings

• Identifies root causes, prioritizes threats and recommends and/or implements corrective action

• Explores the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices

Basic Qualifications (Required Skills/Experience):

• Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years

• Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)

• 10+ years of experience in cybersecurity

• 10+ years of experience in cybersecurity policies and implementation of Risk Management Framework (RMF):