Cybersecurity – Senior Information System Security Manager (ISSM)

Cybersecurity – Senior Information System Security Manager (ISSM)

Company:

The Boeing Company

The Boeing Company is looking for a highly talented, motivated, and creative cybersecurity professional to join our Enterprise Classified Security team as a Cybersecurity – Senior Information System Security Manager (ISSM) based in Berkeley, MO.

The selected candidate will rely on cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSM is responsible for ensuring all Information System Security policies, standards, and directives are enforced to support assessment, authorization and continued operation of information systems processing classified information. 

Position Responsibilities:

• Provide technical guidance and mentorship to program leadership, fostering a culture of innovation and continuous improvement

• Lead the effort to develop and document best practices and methodologies for cybersecurity operations to ensure consistency and quality across the organization

• Communicate effectively with stakeholders to gather requirements, present architectural designs, and provide updates on project progress

• Work closely with cross-functional teams, including development, operations, and product management, to ensure alignment on project goals and deliverables

• Provide guidance for enterprise implementation of AI within classified environments

• Utilizes cybersecurity principles to analyze existing systems and processes, identifying areas for optimization and waste reduction to improve overall efficiency

• Define, collect, analyze, and refine Key Performance Indicators (KPIs) and metrics for cybersecurity deliverables and team execution to ensure continuous improvement and accountability

• Stay current with industry trends, emerging technologies, and best practices in cloud computing, cybersecurity requirements, DevOps, and apply this knowledge to enhance our solutions

• Provide oversight of DFARS/CUI and CMMC compliance across multiple programs

• Primary point of contact with DCSA for a large portfolio of NISP classified systems across multiple divisions and product lines

Additional Responsibilities:

• Apply an interdisciplinary, collaborative approach to lead activities to strategize, plan, design, develop and verify highly-complex security solutions to meet enterprise needs

• Provide strategic guidance and consultation on enterprise execution of the Risk Management Framework (RMF), security compliance and monitoring, the delivery of technical reports/briefings, root cause analysis and resolution and information security policy, standards, guidelines and procedure development/implementation

• Oversee, develop, design and conduct research that results in new requirements management methodologies or results in unique approaches that mitigate assessment and review findings

• Provide mentoring and technical leadership to the information security enterprise community for developing and enhancing security solutions

• Integrate technical, cost, value and risk considerations into the secure product definition

• Explore and shape industry knowledge and methods, tools and processes applicable to security solutions

• Represent the company in industry or academic forums

• Interface with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements

• Prepare, review, and present technical reports and briefings

• Identify root causes, prioritizes threats and recommends and/or implements corrective action

• Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices

Basic Qualifications (Required Skills/Experience):

• Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)

• 10+ years of combined experience and/or education in cybersecurity, IT, or a related field

• 10+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation (e.g., DAAG, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series)

• 5+ years of experience with cybersecurity leadership overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance

• 5+ years of experienc