Regional Cyber Enhanced Assessments Lead - onsite, Tucson, AZ

Date Posted:

2024-07-03

Country:

United States of America

Location:

AZ855: RMS AP Bldg M05 1151 East Hermans Road Building M05, Tucson, AZ, 85756 USA

Position Role Type:

Onsite

At Raytheon, the foundation of everything we do is rooted in our values and a higher calling – to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today’s mission and stay ahead of tomorrow’s threat. Our team solves tough, meaningful problems that create a safer, more secure world.

Job Summary:

Our cybersecurity team is seeking a Cyber Enhanced Assessment (CEA) Lead that will support multiple facilities but be primarily located in Tucson, AZ.

The CEA Lead is responsible for overseeing the information system Continuous Monitoring (ConMon) and enhanced assessment programs within their area of responsibility and supports self-inspections to validate the compliance with regulatory and internal requirements. Managing a team of independent assessors, the CEA Lead will observe and help improve the cybersecurity compliance and vulnerability management of information systems across the business. The CEA Lead will periodically brief leadership on the status of the assessment programs and significant/trending discoveries from ConMon and enhanced assessments. In addition to direct reports, you may mentor others and provide support and advice pertaining to day-to-day occurrences or issues, while further protecting our warfighter.

What you will do:

• Oversees the development and sustainment of ConMon documentation (e.g., process, instruction, training) and manages assessors, tools, and resources efficiently and effectively. Identifies and manages challenges and opportunities for the CEA Program. Partners with Cyber Region Leads to assign Cyber personnel to augment the CEA Team in areas or locations, as needed.
• Reviews reports prepared by CEA assessors (direct reports or augmented assessors) to identify trends and assists with root cause analysis. Conducts periodic leadership briefings on the status of the CEA Program and significant discoveries. Develop reports and brief Senior Leadership on newly identified threats and assist in the development of implementation plans to mitigate the risk.
• Partners with the Strategic Policy and Compliance Lead (SPCL) to enhance and evolve business unit Cybersecurity policy based on CEA findings and data. Collaborates with SPCL to ensure CSA ConMon requirements and expectations are accounted for.
• Partners with GSS Peer Review / Self-Inspection Team to ensure compliance with CSA Industrial Security requirements and coordinates Cybersecurity support for Peer Review / Self-Inspection events, as needed.  
• Intermittent travel to other Raytheon locations (20-30%).

Qualifications we prefer:

• Typically requires a bachelor’s degree with 8 years of experience as described in the bullet below or an advanced degree with 5 years of relevant experience described in the bullet below.
• Relevant experience in any combination:
  • Cybersecurity, systems security, or system hardening
  • Security Control Accessor (SCA) with the government or military
  • Information Technology
  • Experience with network security and/or systems security, which includes any of the following: architecture, topology, protocols, components, and/or principles 
  • Experience with configuring and/or auditing operating systems
  • Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Process Manual (DAAPM), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), and/or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPPA
  • Experience working with and/or supporting computer technologies (such as: databases, operating systems, computer network hardware, protocols, security methodologies, software programs, hardware troubleshooting or electronics)
• Experience with various information system security tools that address vulnerability analysis and mitigation.  These include Splunk, Forcepoint, Ivanti, Tenable, ACAS, HBSS, etc.
• IAM Level I certification (Security+ or other)
• Active and transferable SECRET U.S. government issued security clearance is required prior to start date.  U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.

Qualifications we prefer:

• Strong verbal and written skills required providing management status reports and document system c