Cybersecurity – Information System Security Manager (ISSM)

VulnU; Herndon (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Relocation assistance

Job summary

The Boeing Company in Herndon, VA seeks a Cybersecurity – Information System Security Manager (ISSM) to lead program information security and RMF activities across multiple domains. The ISSM will guide a team, coordinate risk decisions, and ensure compliance with DoD/NIST standards, reporting to senior leadership.

Key qualifications include IAM Level III certification, RMF leadership, and strong communication skills.

Qualifications

• Requires current IAM Level III certification (CISSP, GSLC, or CISM)
• Experience leading RMF-based programs and teams
• Ability to translate complex technical risk for senior leadership
• Knowledge of DoD/NIST RMF frameworks and related guidance
• Willingness to travel 10–20% as needed

Responsibilities

• Oversees development and deployment of program information security across multiple programs and locations.
• Manages RMF risk decisions and coordinates with stakeholders.
• Leads security assessments, audits, and continuous monitoring activities.
• Prepares and presents technical reports and briefings to senior leaders.
• Develops enterprise information security policies, standards, and procedures across stakeholders.

Skills

RMF leadership

risk management

communication with leadership

cybersecurity strategy

information assurance

Tools

NESSUS

ACAS

DISA STIGs

SCAP

HBSS

Job description

Cybersecurity – Information System Security Manager (ISSM)Company:The Boeing CompanyThe Boeing Company is currently seeking a Cybersecurity – Information System Security Manager (ISSM) to join the team in Herndon, VA.The selected candidate will rely on cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSM is responsible for ensuring all Information System Security policies, standards, and directives are enforced to support assessment, authorization and continued operation of information systems processing classified information.Position Responsibilities:Oversees the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures (multiple locations)Manages assigned team to facilitate effective execution of Risk Management Framework (RMF)Provides guidance and coaching to support team within Information SecurityManages and performs security compliance continuous monitoringOversees and participates in security assessments and auditsPrepares, reviews, and presents technical reports and briefingsIdentifies root causes, prioritizes threats and recommends and/or implements corrective actionExplores the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practicesLeads development of enterprise-wide information security policies, standards, guidelines and procedures that may reach across multiple stakeholder organizationsBasic Qualifications (Required Skills/Experience): Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 yearsCurrently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)5 years of combined experience and education in IT, cybersecurity, or related fields3 years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS3 years of experience with cybersecurity leadership overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance3 years of experience communicating complex technical risks, translating impact, and advising senior leadersExperience in cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 seriesAbility to travel 10% - 20% of the timePreferred Qualifications (Desired Skills/Experience):5 years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs5 years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS5 years of experience cybersecurity leadership overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance.5 years of experience communicating complex technical risks, translating impact, and advising senior leaders.Conflict of Interest:Successful candidates for this job must satisfy the Company’s Conflict of Interest (COI) assessment process.Drug Free Workplace:Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria are met as outlined in our policies. Pay & Benefits:At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.Pay is based upon candidate experience and qualifications, as well as market and business considerations.Summary pay range: $140,250 – $189,750Language Requirements:Not ApplicableEducation:Not ApplicableRelocation:This position offers relocation based on candidate eligibility.Export Control Requirement:This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.Safety Sensitive:This is not a Safety Sensitive Position.Security Clearance:This position requires an active U.S. Top Secret/SCI Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)Visa Sponsorship:Employer will not sponsor applicants for employment visa status.Contingent Upon Award ProgramThis position is not contingent upon program awardShift:Shift 1 (United States of America)