Cybersecurity – Information System Security Manager (ISSM)

Lead classified cybersecurity and RMF-based security activities to support the authorization and continued operation of information systems.

Responsibilities

• Perform security analysis of operational and development environments, including threats, vulnerabilities, and internal interfaces, to assess compliance with accepted industry and government standards
• Lead and implement Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems
• Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL), and support Continuous Monitoring (CONMON)
• Supervise configuration management of assigned systems and audit systems to maintain security posture integrity
• Lead staff efforts to document the organization’s compliance state using assessment and test/analysis data
• Conduct risk assessments and investigations; implement risk mitigations; coordinate incident response activities
• Conduct periodic hardware/software inventory assessments
• Serve as an organization spokesperson on sophisticated projects and programs
• Advise management and customers on sophisticated technical research studies
• Collaborate with government customers, suppliers, and internal teams to implement protective mechanisms and ensure understanding and compliance with cybersecurity requirements
• Supervise development and deployment of program information security for all program systems to meet program and enterprise requirements, policies, standards, guidelines, and procedures
• Facilitate effective execution of the Risk Management Framework (RMF) for assigned teams
• Provide guidance and mentorship to support the team within Information Security
• Lead and perform security compliance continuous monitoring
• Coordinate and participate in security assessments and audits
• Prepare, review, and present technical reports and briefings
• Identify root causes, prioritize threats, and recommend and/or implement corrective actions
• Monitor enterprise and industry developments to apply evolving information security best practices
• Lead development of enterprise-wide information security policies, standards, guidelines, and procedures that may extend across multiple partner organizations

Requirements

• Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or enrolled in a Continuous Vetting program within the last 5 years
• Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)
• 5+ years of experience with cyber security policies and implementation of Risk Management Framework (RMF), including DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series
• Willing to travel up to 10%

Preferred Qualifications

• 5+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs
• 5+ years of experience using security relevant tools and applications supporting RMF, including NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS
• 5+ years of experience assessing and documenting test or analysis data to demonstrate cyber security compliance

Tools / Technologies

• CISSP, GSLC, CISM
• Risk Management Framework (RMF)
• DAAPM, CNSSI 1253, ICD-503, JSIG
• NIST SP 800 series
• NESSUS, ACAS
• DISA STIGs, SCAP
• Audit Reduction
• HBSS

Additional Job Details

• Location: Berkeley, MO (onsite)
• Compensation: USD 130,900 - 177,100 per year
• Experience: 5+ years
• Shift: 1st shift
• Applications accepted until: Nov. 12, 2026

Security Clearance / Eligibility

• Active U.S. Top Secret Security Clearance required (U.S. Citizenship required); a U.S. clearance active in the past 24 months is considered active
• Employer will not sponsor employment visas
• Successful candidates must satisfy the Company’s Conflict of Interest (COI) assessment process
• Boeing is a Drug Free Workplace; post-offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria are met
• Export control: position requires a “U.S. Person” as defined by 22 C.F.R. §120.62 (U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee)
• US based job, U.S. Person required
• Relocation assistance is not a negotiable benefit

Benefits

• Generous company match to your 401(k)
• Industry-leading tuition assistance program pays your institution directly
• Fertility, adoption, and surrogacy benefits
• Up to $10,000 gift match when you support your favorite nonprofit organizations
• Competitive base pay and variable compensation opportunities
• Health insurance
• Flexible spending accounts
• Health savings accounts
• Retirement savings plans
• Life and disability insurance programs
• Programs that provide for both paid and unpaid time away from work

Benefits information is informational only; subject to eligibility requirements and other conditions that may differ by subsidiary/business unit or union-represented employees depending on bargaining agreements.