This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
At Boeing, we innovate and collaborate to make the world a better place. We’re committed to fostering an environment for every teammate that’s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us. The Boeing Company is looking for a highly talented, motivated, and creative cybersecurity professional to join our Enterprise Classified Security team as a Cybersecurity – Senior Information System Security Manager (ISSM) based in Berkeley, MO. The selected candidate will rely on cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSM is responsible for ensuring all Information System Security policies, standards, and directives are enforced to support assessment, authorization and continued operation of information systems processing classified information.
Job Responsibility:
Provide technical guidance and mentorship to program leadership
Lead the effort to develop and document best practices and methodologies for cybersecurity operations
Communicate effectively with stakeholders to gather requirements, present architectural designs, and provide updates on project progress
Work closely with cross-functional teams
Provide guidance for enterprise implementation of AI within classified environments
Utilize cybersecurity principles to analyze existing systems and processes
Define, collect, analyze, and refine Key Performance Indicators (KPIs) and metrics for cybersecurity deliverables
Stay current with industry trends, emerging technologies, and best practices
Provide oversight of DFARS/CUI and CMMC compliance across multiple programs
Primary point of contact with DCSA for a large portfolio of NISP classified systems
Apply an interdisciplinary, collaborative approach to lead activities to strategize, plan, design, develop and verify highly-complex security solutions
Provide strategic guidance and consultation on enterprise execution of the Risk Management Framework (RMF)
Oversee, develop, design and conduct research that results in new requirements management methodologies
Provide mentoring and technical leadership to the information security enterprise community
Integrate technical, cost, value and risk considerations into the secure product definition
Explore and shape industry knowledge and methods, tools and processes applicable to security solutions
Represent the company in industry or academic forums
Interface with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms
Prepare, review, and present technical reports and briefings
Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices
Requirements:
Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)
10+ years of combined experience and/or education in cybersecurity, IT, or a related field
10+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation (e.g., DAAG, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series)
5+ years of experience with cybersecurity leadership overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance
5+ years of experience communicating complex technical risks, translating impact, and advising senior leaders
Active U.S. Secret Security Clearance (U.S. Citizenship Required)
U.S. Person as defined by 22 C.F.R. §120.62
Nice to have:
10+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs
10+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS
10+ years of experience assessing and documenting test or analysis data to show cyber security compliance
10+ years of experience in project management
5+ years of experience in a leadership role leading teams, initiatives, or projects to meet business objectives and influence change
5+ years of eMASS experience
Excellent problem-solving skills and the ability to think critically and strategically
Strong communication and interpersonal skills, with the ability to work collaboratively in a team environment
What we offer:
Competitive base pay and variable compensation opportunities
Health insurance
Flexible spending accounts
Health savings accounts
Retirement savings plans
Life and disability insurance programs
Programs that provide for both paid and unpaid time away from work
Generous company match to your 401(k)
Industry-leading tuition assistance program pays your institution directly
Fertility, adoption, and surrogacy benefits
Up to $10,000 gift match when you support your favorite nonprofit organizations