Senior Information Systems Security Officer (ISSO) II - Tucson, AZ

RTX (Raytheon); Tucson (AZ); On-site; USD 110,000 - 150,000; Full time

Job summary

RTX in Tucson, AZ, is seeking a Senior Information Systems Security Officer II to lead cybersecurity compliance, assessment, and operations onsite for programs under RMF. The role includes mentoring ISSOs, guiding documentation, and ensuring security controls align with DoD directives.

You will coordinate with cybersecurity leadership, implement policy, and provide SME guidance on a broad range of topics. Travel to Raytheon sites is expected 10–20% of the time.

Qualifications

• Typically requires a University Degree or equivalent experience and minimum 8 years prior relevant experience, or An Advanced Degree in a related field and minimum 5 years experience.
• IAM Level I certification (Security+ or other)
• Relevant experience in Cybersecurity, systems security or hardening
• Experience with RMF, DAAPM, JSIG, NISPOM, PCI/ISO/HIPAA or similar regulations
• Experience with computer technologies (databases, OS, networks, hardware)

Responsibilities

• Review configuration management requests within authority
• Conduct technical and administrative assessments
• Integrate new cybersecurity processes, procedures and tools
• Assist ISSOs and Cybersecurity Managers with docs
• Oversee ISSOs to ensure policy implementation
• Travel to other Raytheon locations 10-20%

Skills

RMF knowledge

Cybersecurity experience

DoD/IT knowledge

Documentation writing

Education

University degree or equivalent experience

Advanced degree in related field

Tools

IAM Certification (Security+)

Job description

Date Posted: 2026-10-07

Country: United States of America

Location: US-AZ-TUCSON-M05 ~ 1151 E Hermans Rd ~ BLDG M05 (External Site)

Position Role Type: Onsite

U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance

Security Clearance Type: Secret - Current

Security Clearance Status: Active and existing security clearance required on day 1

At RTX, the world largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world's most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world.

Raytheon brings the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. We deliver solutions that help our nation and allies defend freedoms and deter aggression, creating a safer, more secure world. Join us and help shape the future of aerospace and defense.

Our cybersecurity team is seeking a Senior Information Systems Security Officer (ISSO) II to support our team 100% onsite at our facility in Tucson, Arizona.

The ISSO is responsible for compliance oversight, assessment, and operations of systems under their purview. They may be assigned to a single large-scale program or oversee multiple programs. Although you will not have direct reports, you will mentor a team of ISSO's to provide support and advice pertaining to day-to-day occurrences or issues.

You will conduct recurring Cybersecurity reviews on information systems in accordance with DoD Manuals, NIST Special Publications, customer directives, and company policies as applicable.

You’ll serve as subject matter experts (SME) on a broad range of Cybersecurity topics. You may represent the Cybersecurity organization and business unit to external Cybersecurity counterparts. You are responsible for providing guidance and technical training to ISSOs across the organization.

What You Will Do

• Reviewing and approving (within authority) configuration management requests
• Conducting technical and administrative assessments
• Integrating new Cybersecurity processes, procedures and tools
• Support ISSOs and Cybersecurity Managers in the creation, review and update of Cybersecurity documentation and other technical writing
• Oversee ISSO's to ensure implementation of policies and procedures as outlined within the Cybersecurity artifacts and governing documentation
• Intermittent travel to other Raytheon locations (10-20%)

Qualifications You Must Have

• Typically requires a University Degree or equivalent experience and minimum 8 years prior relevant experience, or An Advanced Degree in a related field and minimum 5 years experience.
• IAM Level I certification (Security+ or other)
• Relevant Experience Considered in any combination: Cybersecurity, systems security or hardening
• Information Technology
• Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Process Manual (DAAPM), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), and/or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPPA
• Experience working with and/or supporting computer technologies (such as: databases, operating systems, computer network hardware, software programs, hardware troubleshooting or electronics)
• Physical security/security, policework/criminal justice, investigations, or Border Patrol
• Project or program management, office management, senior administration, or account management

Qualifications We Prefer

• Experience working in DoD classified operating and/or laboratory environments
• Experience with various information system security tools that address vulnerability analysis and mitigation. These may include Splunk, Forcepoint, Ivanti, Tenable, ACAS, HBSS, etc.
• Familiarity with implementation of Government directives and policies derived from NIST, CNSSI, DoD, or other Government Regulatory compliance standards within a professional industry
• Experience in the execution of the Assessment & Authorization processes, as defined within the Risk Managed Framework (RMF)
• Experience providing technical security consultation for complex, cross-domain, heterogeneous classified networked environments in collaboration with internal/external Customers, Information Technology (IT)
• Familiarity with large multi-facility networks including complex components, including Windows and Linux environments
• Experience interpreting, implementing, and assessing DISA STIGs.
• Familiarity with the exec