Classified Information Systems Security Manager (Onsite)

Collins Aerospace; Cedar Rapids (IA); On-site; USD 108,000 - 205,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Three weeks of vacation for newly hire

Generous 401(k) match and retirement

Tuition reimbursement program

Life insurance and disability coverage

Job summary

Collins Aerospace in Cedar Rapids is seeking an experienced Information Systems Security Manager (ISSM) to lead cybersecurity for DoD DoD cleared environments onsite. You will own RMF/JSIG-based authorization, continuous monitoring, and risk management while mentoring ISSOs and ensuring inspection readiness.

You will collaborate across IT, Facilities, and Industrial Security and coordinate with leadership to address risk impacts and authorization conditions.

Qualifications

• Typically requires a university degree with 8+ years of relevant experience.
• Active DoD Top Secret clearance day one.
• IAM Level III certification per DoD 8570/8140.
• Experience performing ISSM responsibilities for classified systems.
• Advanced RMF and DoD system authorization knowledge.
• Travel up to 20% domestically.

Responsibilities

• Independently own cybersecurity responsibilities for assigned information systems.
• Serve as primary cybersecurity authority for inspections, assessments, audits, and monitoring.
• Execute and maintain system authorization using RMF and JSIG/DAAG guidance.
• Maintain awareness of DD Form 254s and contractual security requirements.
• Develop, maintain, and validate cybersecurity plans and artifacts.
• Identify and communicate cybersecurity risk to leadership and Officials.
• Lead continuous monitoring activities and track security data.
• Drive closure of POA&Ms from inspections and assessments.
• Oversee cybersecurity Change Control Boards (CCBs) and assess security impact.
• Coordinate corrective actions resulting from incidents and findings.
• Engage with Program Managers to integrate security into programs.
• Collaborate with IT, Facilities, and Industrial Security teams.
• Coordinate with enterprise cybersecurity teams for consistency.
• Provide mentoring to ISSOs and deliver status reporting to leadership.

Skills

RMF knowledge

JSIG experience

risk management

leadership

CISSP

DD254 knowledge

Education

University degree

Advanced degree

Job description

Country:

United States of America

Location:

US-IA-CEDAR RAPIDS-121 ~ 350 Collins Rd NE ~ BLDG 121

Position Role Type:

Onsite

U.S. Citizen, U.S. Person, or Immigration Status Requirements:

Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance

Security Clearance Type:

DoD Clearance: Top Secret

Security Clearance Status:

Active and existing security clearance required on day 1

The Information Systems Security Manager (ISSM) serves as the primary cybersecurity authority for assigned classified and controlled information systems. This role is responsible for the end-to-end execution and oversight of cybersecurity activities in compliance with applicable U.S. Department of Defense (DoD) laws, regulations, and contractual requirements.

As an advanced individual contributor, the ISSM independently leads system authorization, continuous monitoring, inspection readiness, and risk management activities, while providing technical oversight and mentorship to Information Systems Security Officers (ISSOs) and maintaining accountability for cybersecurity outcomes. Responsibilities include implementing and sustaining cybersecurity requirements defined by government frameworks and guidance, including the Risk Management Framework (RMF), Joint Special Access Program Implementation Guide (JSIG) for SAP systems, NIST publications, NISPOM, and the DCSA Assessment and Authorization Guide (DAAG), and associated assessment and authorization guidance.

** This position is onsite in Cedar Rapids. IA. **

What YOU will do:

• Independently own cybersecurity responsibilities for assigned information systems, ensuring security objectives are achieved and organizational risk is effectively managed.
• Serve as the primary cybersecurity authority for inspections, assessments, audits, and continuous monitoring, leading preparation, execution, and response activities to maintain authorization and inspection readiness.
• Execute and maintain system authorization using the Risk Management Framework (RMF) and applicable guidance, including the Joint Special Access Program Implementation Guide (JSIG) for Special Access Program systems and the DCSA Assessment and Authorization Guide (DAAG) for DoD collateral systems.
• Maintain awareness and working knowledge of DD Form 254s and contractual security requirements, ensuring cybersecurity controls, inspection scope, and authorization boundaries align with approved mission and program objectives.
• Develop, maintain, and validate cybersecurity plans, authorization artifacts, and compliance documentation to support audit-ready operations.
• Identify, assess, and communicate cybersecurity risk to senior leadership and Authorizing Officials, including the impact of system changes, vulnerabilities, inspection findings, and authorization conditions.
• Lead continuous monitoring activities, including evaluation of security posture, validation of control effectiveness, and tracking of security-relevant data.
• Develop, manage, and drive closure of Plans of Action and Milestones (POA&Ms) resulting from inspections, assessments, and continuous monitoring activities.
• Lead and oversee cybersecurity Change Control Boards (CCBs), evaluating proposed system changes for security impact, authorization implications, and alignment with RMF requirements.
• Execute or coordinate corrective and protective security actions resulting from inspections, continuous monitoring, or identified cybersecurity incidents.
• Engage with Program Managers to integrate cybersecurity requirements into program execution, schedules, and decision-making, and to address risk impacts to cost, scope, and mission delivery.
• Collaborate with cross-functional teams, including Information Technology, Facilities, and Industrial Security, to ensure cybersecurity requirements are integrated into technical, physical, and operational environments.
• Coordinate with other cybersecurity teams across the enterprise to ensure consistent implementation of cybersecurity processes, standards, and authorization practices.
• Provide technical direction and mentoring to ISSOs to ensure consistent execution of RMF activities, inspection readiness, and quality of authorization artifacts, while remaining accountable for cybersecurity outcomes.
• Prepare and deliver cybersecurity status reporting to senior leadership, summarizing authorization posture, inspection readiness, risk trends, POA&Ms, and significant cybersecurity issues.

Qualifications YOU Must Have:

• Typically requires a University Degree and minimum 8 years prior relevant experience or an Advanced Degree in a related field and minimum 5 years of experience.
• U.S. Citizen is required as only U.S. Citizen are able to obtain a clearance.
• Active DOD Top Secret SecurityClearance day one.
• IAM Level III certification compliant with DoD 8570 / DoD 8140 (e.g., CISSP, CISM, GSLC).
• Experience performing ISSM responsibilities for classified or controlled information systems.
• Advanced knowledge of RMF and DoD system authorization processes.
• Experience executing authorization and continuous monitoring using JSIG and/or DAAG.
• Knowledge of cybersecurity regulations, contractual requirements, and DD Form 254 interpretation.
• Experience supporting inspections, assessments, and audit activities.
• Ability to independently assess risk and communicate cybersecurity status to leadership.
• Must be willing to travel domestically up to 20%, generally supporting other company facilities.

QualificationsWe Prefer:

• Master’s degree in Cybersecurity, Computer Science, or a related field.
• Experience as the primary ISSM for SAP and/or DoD collateral systems.
• Experience owning ATOs and driving POA&Ms closure.
• Experience mentoring ISSOs and providing technical oversight.
• Experience leading Change Control Boards (CCBs).
• Experience working with cross-functional teams and enterprise cybersecurity organizations.
• Strong written and verbal communication skills for senior leadership briefings.

What We Offer:

• Medical, dental, and vision insurance.
• Three weeks of vacation for newly hired employees.
• Generous 401(k) plan that includes employer matching funds and separate. employer retirement contribution, including a Lifetime Income Strategy option.
• Tuition reimbursement program.
• Student Loan Repayment Program.
• Life insurance and disability coverage.
• Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance,critical illnessinsurance, group legal, ID theft protection.
• Birth, adoption, parental leave benefits.
• Ovia Health, fertility, and family planning.
• Adoption Assistance.
• Autism Benefit.
• Employee Assistance Plan, including up to 10 free counseling sessions.
• Healthy You Incentives, wellness rewards program.
• Doctor on Demand, virtual doctor visits.
• Bright Horizons, child, and elder care services.
• Teladoc Medical Experts, second opinion program.
• And more!

Do you want to be part of a new, exciting initiative to combine foundational IT with new digital technologies? Our Digital Technology team is driving business efficiencies and a better customer experience by connecting technologies, people, information and processes. From making aircraft more electric, intelligent and integrated to building new software platforms such as Internet of Things, big data, artificial intelligence, and blockchain, there’s no better place to be right now than in digital. If you’re an agile thinker who enjoys utilizing modern technology to make big improvements, then you’re a perfect fit for this team. Join Collins Aerospace to help us revolutionize the aerospace industry today!

WE ARE REDEFINING AEROSPACE.

* Please consider the following role type definitions as you apply for this role.

Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products.

Regardless of your role type, collaboration and innovation are critical to our business and all employees will have access to digital tools so they can work with colleagues around the world – and access to Collins sites when their work requires in-person meetings.

At Collins, the paths we pave together lead to limitless possibility. And the bonds we form – with our customers and with each other -- propel us all higher, again and again.

As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.

The salary range for this role is 107,500 USD - 204,500 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education/training, and key skills. Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement. Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company’s performance. This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.

RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.