Cybersecurity - Information System Security Manager (ISSM)

• Perform security analysis of operational and development environments threats vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards
• Lead and implement the Assessment and Authorization (A&A) processes under the Risk Managed Framework (RMF) for new and existing information systems
• Facilitate development of Memorandums of Understanding (MOU) Interconnection Security Agreements (ISA) Risk Acceptance Letters (RAL) and support Continuous Monitoring (CONMON)
• Configure management of assigned systems; auditing systems to ensure security posture integrity
• Lead staff with assessments and test/analysis data to document state of compliance with security requirements
• Conduct risk assessments and investigations implement appropriate risk mitigations and coordinate incident response activities
• Conduct periodic hardware/software inventory assessments
• Serve as organization spokesperson on sophisticated projects and programs
• Act as advisor to management and customers on sophisticated technical research studies
• Collaborate with the appropriate government customers suppliers and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements
• Supervise the development and deployment of program information security for all program systems to meet the program and enterprise requirements policies standards guidelines and procedures
• Handle assigned team to facilitate effective execution of Risk Management Framework (RMF)
• Provide guidance and mentor to support team within Information Security
• Lead and perform security compliance continuous monitoring
• Coordinate and participate in security assessments and audits
• Prepare review and present technical reports and briefings
• Identify root causes prioritize threats and recommend and/or implement corrective action
• Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices
• Lead development of enterprise-wide information security policies standards guidelines and procedures that may reach across multiple partner organizations

• Currently hold certification in good standing to satisfy IAM Level III (CISSP GSLC or CISM)
• 5+ years of experience in cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. DAAPM CNSSI 1253 ICD-503 JSIG or NIST SP 800 series

• 5+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs
• 5+ years of experience utilizing security relevant tools systems and applications in support of Risk Management Framework (RMF) to include NESSUS ACAS DISA STIGs SCAP Audit Reduction and HBSS
• 5+ years of experience in assessing and documenting test or analysis data to show cyber security compliance

What We Do

A leading global aerospace company and top U.S. exporter Boeing develops manufactures and services commercial airplanes defense products and space systems for customers in more than 150 countries. Our U.S. and global workforce and supplier base drive innovation economic opportunity sustainability and community impact. Boeing is committed to fostering a culture based on our core values of safety quality and integrity.

Why Work With Us

Aerospace protects and connects people enables economic growth and trade provides humanitarian relief and allows for human exploration of space. Boeing collaborates globally to support responsible growth for our industry and we invest in innovation that improves the efficiency and sustainability of air travel and our operations.

Gallery