ISSM – RMF Cybersecurity Leader (Secret)

ApplyMint; Berkeley (MO); On-site; USD 130,900 - 177,100; Full time

Job summary

Boeing Classified Cybersecurity seeks an Information System Security Manager (ISSM) to lead RMF activities for F-15 Training Systems in Berkeley, MO or Hazelwood, MO. The role focuses on security policy enforcement, assessment, authorization, and continuous monitoring for classified information systems.

Responsibilities include A&A under RMF, risk assessments, incident coordination, and collaboration with government customers and internal teams to implement protective measures and ensure

Qualifications

• Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)
• 5+ years of combined experience and/or education in cybersecurity, IT, or a related field
• 5+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation (e.g., DAAG, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series)
• 5+ years of experience utilizing security relevant tools, systems, and applications in support of RMF to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS
• 3+ years of experience with cybersecurity leadership overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance
• 3+ years of experience communicating complex technical risks, translating impact, and advising senior leaders

Responsibilities

• Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards
• Lead and implement the Assessment and Authorization (A & A) processes under the RMF for new and existing information systems
• Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON)
• Supervise configuration management of assigned systems; auditing systems to ensure security posture integrity
• Lead staff with assessments and test/analysis data to document state of compliance with security requirements
• Conduct risk assessments and investigations, implement appropriate risk mitigations, and coordinate incident response activities
• Conduct periodic hardware/software inventory assessments
• Serve as organization spokesperson on sophisticated projects and programs
• Act as advisor to management and customers on sophisticated technical research studies
• Collaborate with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements
• Supervise the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures
• Handle assigned team to facilitate effective execution of RMF
• Provide guidance and mentor to support team within Information Security
• Lead and perform security compliance continuous monitoring
• Coordinate and participate in security assessments and audits
• Prepare, review, and present technical reports and briefings
• Identify root causes, prioritize threats and recommend and/or implement corrective action
• Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices
• Lead development of enterprise-wide information security policies, standards, guidelines and procedures that may reach across multiple partner organizations

Skills

CISSP/GSLC/CISM

RMF Experience

Security Leadership

Senior Stakeholder Communication

Tools

NESSUS

ACAS

DISA STIGs

SCAP

HBSS

Job description

Boeing Classified Cybersecurity seeks an Information System Security Manager (ISSM) to lead RMF activities for F-15 Training Systems in Berkeley, MO or Hazelwood, MO. The role focuses on security policy enforcement, assessment, authorization, and continuous monitoring for classified information systems.

Responsibilities include A&A under RMF, risk assessments, incident coordination, and collaboration with government customers and internal teams to implement protective measures and ensure