Cybersecurity ISSM Lead for Classified Systems

Boeing; Herndon (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Boeing in Herndon, VA is seeking a Cybersecurity – Information System Security Manager (ISSM) to lead information security across program systems. The role emphasizes RMF leadership, risk assessment, and collaboration with diverse teams to enforce security policies while guiding enterprise security initiatives.

The ISSM will monitor security compliance, coordinate audits, and communicate complex risks to senior leaders, with travel up to 20%.

Qualifications

• Tier 5 Investigation or Continuous Vetting within last 5 years
• Active IAM Level III certification (CISSP/GSLC/CISM) in good standing
• 5+ years of combined IT/cybersecurity experience
• 3+ years RMF tools experience (NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, HBSS)
• 3+ years of cybersecurity leadership overseeing programs and teams
• 3+ years of communicating complex technical risks to senior leaders
• Experience with RMF policies (DAAPM, CNSSI 1253, ICD-503, JSIG, NIST SP 800)
• Willingness to travel 10–20% of the time

Responsibilities

• Oversees development and deployment of program information security to meet enterprise requirements
• Manages team to execute RMF effectively
• Provides guidance to Information Security team
• Manages security compliance continuous monitoring
• Oversees security assessments and audits
• Prepares and presents technical reports and briefings
• Identifies root causes and recommends corrective action
• Explores enterprise security knowledge and methods across stakeholders
• Leads development of enterprise information security policies and procedures across multiple groups

Skills

RMF

Security leadership

Risk assessment

Communicate risk

Travel readiness

Education

Bachelor's degree in IT/Cybersecurity

Tools

NESSUS

ACAS

DISA STIGs

SCAP

HBSS

Job description

Boeing in Herndon, VA is seeking a Cybersecurity – Information System Security Manager (ISSM) to lead information security across program systems. The role emphasizes RMF leadership, risk assessment, and collaboration with diverse teams to enforce security policies while guiding enterprise security initiatives.

The ISSM will monitor security compliance, coordinate audits, and communicate complex risks to senior leaders, with travel up to 20%.