Cybersecurity – Senior Information System Security Manager

Cybersecurity – Senior Information System Security Manager

Company:

The Boeing Company

Job ID:

00000401672

Date Posted:

2023-12-14

Location:

USA - Herndon, VA

Job Description Qualifications:

The Boeing Company is currently seeking a Cybersecurity – Senior Information System Security Manager to join the team in Herndon, VA.    

The selected candidate will be a highly motivated Cybersecurity Professional on our Enterprise Government Cybersecurity team. The ISSM will rely on a Cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSM is responsible for maintaining and enforcing all Information System Security policies, standards, and directives to ensure assessment and authorization of information systems processing classified information.

Position Responsibilities:

• Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted Boeing, industry, and government standards

• Manage, develop, and conduct assessment procedures for verification of Risk Management Framework (RMF) and Assessment and Authorization (A&A) safeguards to meet regulatory requirements based on upcoming NISPOM/DAAPM, RMF, JSIG, ICD-503, and NIST 800 series (800-53, 80-171, etc.) guidelines for new and existing information systems

• Author, provide oversite, and ensure timely delivery of RMF package artifacts to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Action & Milestones (POA&M), Continuous Monitoring (CONMON), Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL), etc.

• Coordinate configuration management of assigned systems; auditing systems to ensure security posture integrity

• Review audit data for anomalous or unauthorized activity

• Conduct cybersecurity training, briefings, and presentations to multiple levels of business

• Lead staff with assessments and test/analysis data to document state of compliance with security requirements

• Conduct risk assessments and investigations, implement appropriate risk mitigations, and lead all aspects of incident response activities

• Conduct periodic hardware/software inventory assessments

• Serve as organization spokesperson on sophisticated projects and programs

• Act as advisor to management and customers on sophisticated technical research studies

• Collaborate with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements

This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options.

This position requires an active U.S. Top Secret/SCI Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active.)

This position requires a current Tier 5 (T5), formerly known as a Single Scope Background Investigation (SSBI) (U.S. Citizenship required) or requires candidate agreed to enter a Continuous Evaluation program.

Basic Qualifications (Required Skills/Experience):

• Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)

• Ability to obtain access to Special Access Programs (SAP)

• 5+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs

• 5+ years of experience in cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series

• Ability to obtain a CI Polygraph

Preferred Qualifications (Desired Skills/Experience):

• Bachelor’s Degree or equivalent work or military experience

• Active CI Polygraph

• Project management experience

• Experience in assessing and documenting test or analysis data to show cyber security compliance

• Experience leading audits conducted by external stakeholders

• Excellent written and verbal skills with ability to communicate well with team members, customers and leadership

Typical Education & Experience:

Typically 14 or more years’ related work experience or relevant military experience. Advanced degree (e.g. Bache