Senior ISSO - RMF & Compliance Lead

Raytheon; Tucson (AZ); On-site; USD 87,000 - 165,000; Full time

Job summary

Raytheon in Tucson, AZ is seeking a Senior Information Systems Security Officer (ISSO) to support our 100% onsite team. The successful candidate will work with the Information Systems Security Manager to ensure compliance with NIST SPs, customer directives, and company policies across NISPOM Chapter 8, DAAPM, and JSIG.

The role involves auditing, security plan development, incident response, and updating cybersecurity documentation.

Qualifications

• Bachelor's degree or equivalent with 5+ years of relevant experience, or an Advanced Degree with 3+ years.
• Experience in cybersecurity, information technology, and compliance-based auditing using RMF, DAAPM, JSIG, NISPOM, or related standards.
• Experience with Windows and Linux environments and supporting computer technologies.
• Prior DoD classified environment exposure is preferred.
• Security certification within six months of hire (e.g., Security+ or equivalent).

Responsibilities

• Assessing and monitoring system compliance, auditing, security plan development, and security education.
• Investigating information system security violations and preparing corrective action reports.
• Reviewing and approving configuration management requests within authority.
• Conducting technical and administrative assessments and integrating new cybersecurity processes.
• Supporting creation, review, and update of cybersecurity documentation.

Skills

Cybersecurity

Information Technology

RMF

DAAPM

JSIG

NISPOM

DoD regulations

Education

Bachelor's degree or equivalent

Advanced degree

Tools

Splunk

Forcepoint

Ivanti

Tenable

ACAS

HBSS

Job description

Raytheon in Tucson, AZ is seeking a Senior Information Systems Security Officer (ISSO) to support our 100% onsite team. The successful candidate will work with the Information Systems Security Manager to ensure compliance with NIST SPs, customer directives, and company policies across NISPOM Chapter 8, DAAPM, and JSIG.

The role involves auditing, security plan development, incident response, and updating cybersecurity documentation.