Senior Information Security Manager (ISSM) – RMF & Classified Ops

Boeing; Fairfax (VA); On-site; USD 140,000 - 233,000; Full time

Benefits offered by this job

Relocation assistance

Competitive benefits package

Job summary

Boeing Classified Cybersecurity in Fairfax, Virginia seeks a Cybersecurity – Information System Security Manager (ISSM) to lead security analyses, RMF processes, and risk management for classified information systems. The role requires coordinating with government customers and internal teams to ensure compliance and robust security postures.

Responsibilities include conducting risk assessments, overseeing incident response, and guiding system authorization with RMF practices.

Qualifications

• 5+ years of experience with cyber security policies and RMF (DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series)
• Active Counterintelligence (CI) Polygraph
• Certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)
• Tier 5 Investigation completed within last 5 years or Continuous Vetting in last 5 years

Responsibilities

• Performs security analysis of operational and development environments, threats, vulnerabilities and interfaces
• Leads and implements RMF A&A processes for new and existing information systems
• Facilitates development of MOU, ISA, RAL and supports CONMON
• Oversees configuration management and audits security posture integrity
• Leads staff with assessments and test data to document compliance
• Conducts risk assessments and oversees incident response activities
• Interfaces with government customers and Boeing personnel on cybersecurity requirements

Skills

RMF policy implementation

IAM Level III

Cybersecurity leadership

Risk assessment

Tools

NESSUS

ACAS

DISA STIGs

SCAP

HBSS

Job description

Boeing Classified Cybersecurity in Fairfax, Virginia seeks a Cybersecurity – Information System Security Manager (ISSM) to lead security analyses, RMF processes, and risk management for classified information systems. The role requires coordinating with government customers and internal teams to ensure compliance and robust security postures.

Responsibilities include conducting risk assessments, overseeing incident response, and guiding system authorization with RMF practices.