Cybersecurity – Senior Information System Security Manager (ISSM)

Cybersecurity – Senior Information System Security Manager (ISSM)

Company:

The Boeing Company

Job ID:

00000432778

Date Posted:

2024-08-06

Location:

USA - Huntsville, AL

Job Description Qualifications:

The Boeing Company is currently seeking a Cybersecurity – Senior Information System Security Manager (ISSM) to join the team in Huntsville, Alabama.     

The selected candidate will be a highly motivated Cybersecurity Professional on our Cybersecurity Oversight & Classified Operations Team. The ISSM will rely on a Cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSM is responsible for maintaining and enforcing all Information System Security policies, standards, and directives to ensure assessment and authorization of information systems processing classified information.

Position Responsibilities:

• Leads the development and deployment of program information security for assigned systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures

• Manages Risk Management Framework (RMF) processes, product development and product maintenance for assigned systems

• Manages and performs security compliance continuous monitoring

• Leads and participates in security assessments and audits

• Prepares, reviews, and presents technical reports and briefings

• Identifies root causes, prioritizes threats and recommends/ implements corrective action

• Provides mentoring and technical leadership to the information security program team

• Explores the enterprise and industry for the evolving state of industry knowledge and methods regarding information security best practices

• Develops enterprise-wide information security policies, standards, guidelines and procedures that may reach across multiple stakeholder organizations

• Implements the Authorization and Assessment (A&A) process under the Risk Managed Framework (RMF) for new and existing information systems, to include facilitating Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acceptance Letters (RAL) and support Continuous Monitoring (CONMON)

• Conducts compliance review of operating systems (i.e., Windows, Linux, and Solaris) to governing requirements

• Assesses data to document state of compliance with security requirements

• Conducts risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities

• Interfaces with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements

• Determines project or assignment requirements by breaking them down into tasks and identifying types of equipment, materials, and people needed

• Guides others in creating relevant options for addressing problems/opportunities and achieving desired outcomes

This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options.

This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active.)

Basic Qualifications (Required Skills/Experience):

• Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)

• 5+ years of experience with cyber security policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series

• 5+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs

Preferred Qualifications (Desired Skills/Experience):

• Bachelor’s Degree or equivalent work or military experience

• Experience in assessing and documenting test or analysis data to show cyber security compliance

• Experience leading audits conducted by external stakeholders

Typical Education & Experience:

Typically, 14 or more years’ related work experience or relevant military experience. Advanced degree (e.g. Bachelor, Master, etc.) preferred, but not required.