information systems security manager

Draper

<div><p><b>Overview:</b></p><p>
Draper is an independent, nonprofit research and development company headquartered in Cambridge, MA. The 2,000+ employees of Draper tackle important national challenges with a promise of delivering successful and usable solutions. From military defense and space exploration to biomedical engineering, lives often depend on the solutions we provide. Our multidisciplinary teams of engineers and scientists work in a collaborative environment that inspires the cross-fertilization of ideas necessary for true innovation. For more information about Draper, visit www.draper.com.</p><p></p><p><b>
Job Description Summary:</b></p>
The Information Systems Security Manger (ISSM) will lead the Information Assurance (IA) program for multiple Department of Defense (DoD) and Special Program efforts. The ISSM works under the direction of the Cybersecurity Manager, Special Programs and is knowledgeable of information technology and security principles. This role requires multi-tasking, customer service, communication, and organizational skills.<p></p><p><b>
Job Description:</b></p><p><b>
Duties/Responsibilities</b></p><ul><li>
Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity.</li><li>
Document and escalate incidents that may cause ongoing and immediate impact to the environment.</li><li>
Perform cyber defense trend analysis and reporting.</li><li>
Perform security reviews and identify security gaps in security architecture resulting in recommendations to include in risk mitigation strategy.</li><li>
Work with stakeholders to resolve computer security incidents and vulnerability compliance.</li><li>
Provide advice and input for Disaster Recovery, Contingency, and Continuity of Operations Plans.</li><li>
Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.</li><li>
Perform risk analysis whenever an application or system is implemented or changed.</li><li>
Assure successful implementation and functionality of security requirements and appropriate IT policies and procedures.</li><li>
Performs other duties as assigned.</li></ul><p><b><br>
Skills/Abilities</b></p><ul><li>
Ability to configure and review security functions of information systems.</li><li>
Ability to conduct security analyses, including security configurations and risk assessments.</li><li>
Familiarity working with DoD/IC Security Control Assessors.</li><li>
Familiarity with C2G/C2C interconnected systems and/or Wide Area Network (WAN) environments.</li><li>
Understanding of virtual environments and containerization tools/technologies.</li><li>
Ability to identify systemic security issues based on the analysis of vulnerability and configuration data.</li><li>
Ability to apply techniques for detecting host and network based intrusions using intrusion detection technologies.</li><li>
Ability to function effectively in a dynamic, fast paced environment.</li><li>
Strong interpersonal skills with effective verbal and written communication skills.</li><li>
Clear and structured thought processes and coherent decision making skills.</li></ul><p><b><br>
Education</b></p><ul><li>
Bachelors Degree in Computer Science/Cybersecurity/Information Technology or equivalent field of study required.</li></ul><p><b><br>
Experience</b></p><ul><li>
3-5 years of experience as an ISSM, or performing as an ISSO, implementing DCSA Assessment and Authorization Process Manual (DAAG), DoD Joint Special Access Program Implementation Guide (JSIG), and/or Intelligence Community Directive (ICD) 503 Risk Management, Certification and Accreditation requirements.</li></ul><p></p><p><b>
Additional Job Description:</b></p><p>
Applicants selected for this position will be required to obtain and maintain a government security clearance.
</p><p></p><p>Top Secret Clearance with SCI eligibility is required.</p><p></p><p>
Connect With Draper for Future Opportunities! If you don't find the right posting in our Career Opportunities, you may submit your resume for future consideration.</p><p></p><p><b>
Job Location - City:</b></p>
Cambridge<p></p><p><b>
Job Location - State:</b></p>
Massachusetts<p></p><p><b>
Job Location - Postal Code:</b></p>
02139-3563<p></p><p>
The US base salary range for this full-time position is</p>
$95,000.00 - $245,000.00<p><i>
Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. </i><i>Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Union ranges will be in compliance with the collective bargaining agreement's approved rates by location and role.</i><i> </i><i>Your recruiter can share more about the specific salary range for your preferred location during the hiring process.</i><i> </i><i>Please note that the compensation details listed in US role postings reflect the base salary only, and does not include bonuses or benefits.</i></p><p></p><p>
Our work is very important to us, but so is our life outside of work. Draper supports many programs to improve work-life balance including workplace flexibility, employee clubs ranging from photography to yoga, health and finance workshops, off site social events and discounts to local museums and cultural activities. If this specific job opportunity and the chance to work at a nationally renowned R&amp;D innovation company appeals to you, apply now www.draper.com/careers.</p><p></p><p>
Draper is committed to creating an inclusive environment. We understand the value of inclusivity and its impact on a high-performance culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, national origin, veteran status, or genetic information. Draper is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation, please contact hr@draper.com.</p></div>

Information Systems Security Manager 2

MTSI

<div><div>Modern Technology Solutions, Inc. (MTSI) is seeking a <b>Information Systems Security Manager</b> to lead RMF lifecycle activities from system categorization through ATO.</div><div></div><div><br>
Your essential job functions will include but may not be limited to:
</div><ul><li>Develop and maintain authorization packages</li><li>
Coordinate with SCA and AO representatives to resolve findings and adjudicate risk</li><li>
Prepare systems for ATO, IATT, and continuous authorization</li><li>
Ensure implementation and validation of security controls per JSIG/NIST 800-53.</li><li>
Track and remediate POA&amp;Ms; enforce accountability for corrective actions.</li><li>
Conduct internal compliance assessments and inspection preparation</li><li>
Assess technical risk and provide written risk recommendations to government Cyber lead/Security Director.</li><li>
Ensure configuration management and baseline control integrity</li><li>
Provide cybersecurity briefings to senior leadership as required</li><li>
Maintain working relationships with external stakeholders.</li></ul><div></div><div><b><br>
Required:</b></div><ul><li>
10+ years cybersecurity experience in DoD classified environments. (SAP/SCI)</li><li>
3+ years experience as ISSM or equivalent senior cybersecurity lead</li><li>
Deep familiarity with: JSIG, RMF (DoDI 8510.01), ICD 503, NIST 800-53</li><li>
DoD 8570/8140 IAT Level III or IAM Level II/III certification (e.g., CISSP preferred).</li><li>
Strong written and verbal communication skills with experience preparing presentation materials for leadership audiences.</li><li>
Experience working directly with Authorizing Officials and SCAs.</li><li>
Experience in multi-system portfolio management.</li></ul><div></div><div><b><br>
Education Requirements:</b></div><ul><li>
Bachelor's Degree in Cybersecurity, IT, Engineering, or related field (or equivalent experience).</li></ul><div></div><div><b><br>
Clearance Requirements:</b></div><ul><li>
Current/active Top Secret/SCI; Current or recent DoD SAP access</li><li>
Subject to a Counterintelligence (CI) polygraph</li></ul><div></div><div><br>
</div><div>
#LI-LS1</div><div>
#mtsi</div><div>
#lawrenciumsaskatchewantrout</div><div>
#LI-Onsite</div></div>
<br>
<div><h1 class="jobSectionHeader"><b>Perks and Benefits</b></h1><ul><li><div><div><i>
Vacation:</i></div><div>
New Hires Accrue 20 days of PTO and 10 Holidays per Year</div></div></li><li><div><div><i>
Health Insurance:</i></div><div>
Zero Deductible Health Plans</div></div></li><li><div><div><i>
Flexible Schedules:</i></div><div>
Flex Schedules</div></div></li><li><div><div><i>
Professional Development:</i></div><div>
Up to $10,000 Annual Education/Training Reimbursement
</div></div></li><li><div><div><i>ESOP:</i></div><div>
Funded Stock Ownership Plan</div></div></li><li><div><div><i>
401k Match+:</i></div><div>
6% 401k Match + Immediate Vesting
</div></div></li><li><div><div><i>Bonus Program:</i></div><div>
Semi-Annual Bonus Opportunity
</div></div></li><li><div><div><i>Mentorship:</i></div><div>
Career Mentorship Programs
</div></div></li></ul><h3 class="jobSectionHeader"><b>Why is MTSI a great place to work</b></h3><ul><li><div><div><i>
Interesting Work:</i></div><div>
Our co-workers support some of the most important and critical programs to our national defense and security.</div></div></li><li><div><div><i>
Values:</i></div><div>
Our first core value is that employees come first. We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.</div></div></li><li><div><div><i>
100% Employee Owned:</i></div><div>
We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.</div></div></li><li><div><div><i>
Great Benefits - Most Full-Time Staff Are Eligible for:</i></div></div></li><li><ul><li><div>
Starting PTO accrual of 20 days PTO/year + 10 holidays/year</div></li><li><div>
Flexible schedules</div></li><li><div>
6% 401k match with immediate vesting up to $9k annually</div></li><li><div>
Semi-annual bonus eligibility (July and Decemeber)</div></li><li><div>
Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement account</div></li><li><div>
Up to $10,000 in annual educational reimbursement</div></li><li><div>
Other company funded benefits, like life and disability insurance</div></li><li><div>
Optional zero deductible Blue Cross/Blue Shield health insurance plan</div></li></ul></li><li><div><div><i>
Track Record of Success:</i></div><div>
We have grown every year since our founding in 1993.
</div></div></li></ul><p>Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance</p><p>
MTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.</p><p>
For more information about MTSI, please visitwww.mtsi-va.com</p><h4 class="jobSectionHeader"><b>
EEO Statement</b></h4><div><div><div><p>
MTSI embraces nine core values including our first core value of Employees come first. Consistent with our Core Values, we are committed to Equal Opportunity, making decisions without regard to race, color, religion, sex, national origin, age, military/veteran status, disability, or any other characteristics protected by applicable law. MTSI is committed to Equal Employment Opportunity and providing reasonable accommodations to applicants and employees with physical and/or mental disabilities.</p></div></div></div></div>

Information Systems Security Manager (ISSM)

Applied Research in Acoustics LLC

<p>Position: <b>Information Systems Security Manager (ISSM)</b></p><p>Location: Central Virginia / Charlottesville, VA metro area (Madison, VA)</p><p>ARiA applies broad interdisciplinary expertise in acoustics, machine learning, modeling &amp; simulation, and signal processing toward innovative science and engineering research and development for a diverse set of government and corporate clients. We are a 20-person firm where success is measured by the collective advancement of our research mission.</p><p><b>ARiA: Real Research. Real World.TM</b></p><p>For more information, visit www.ariacoustics.com.</p><p><b>Position Description:</b></p><p>As a high-impact, 20-person prime contractor, ARiA offers the technical autonomy of a startup with the mission-critical stability of a defense leader. You will have a &quot;seat at the table&quot; and direct influence over our security architecture, working in an environment where technical excellence is valued over bureaucracy.</p><p>ARiA is seeking a highly motivated, technically proficient ISSM to serve as a compliance architect and security partner for our research and engineering team. This is a high-agency role designed to build and maintain the compliant infrastructure that allows our scientists to innovate safely.</p><p>The ideal candidate views security as a foundational service that protects and enables the mission. We value collaborative governance&mdash;the ability to design security controls that are technically sound, evidence-based, and integrated seamlessly into the engineering workflow. Success in this role requires intellectual humility, a dedicated focus on mission velocity, and the ability to build consensus through technical expertise and transparent communication.</p><p><i>Responsibilities</i>:</p><ul><li>Dual-Track Compliance: Lead the accreditation and lifecycle management for both Classified Systems (NIST 800-53/RMF) and CUI/Unclassified Systems (NIST 800-171/CMMC)</li><li>Mission-Aligned Security: Partner with software engineers to implement NIST 800-53 and 800-171 controls as &quot;guardrails&quot; that ensure compliance without compromising research velocity</li><li>Transparent Documentation: Develop and maintain SSPs and related security policies and procedures, POA&amp;Ms, and SPRS scores, ensuring all compliance artifacts are accurate and ready for audit by DCSA or DCMA</li><li>Collaborative Education: Lead security awareness initiatives that empower the team to own their security posture, treating security as a shared technical challenge</li><li>Peer-Level Accountability: Participate in the company's culture of open technical debate, where the &quot;best idea wins&quot; regardless of title or seniority</li></ul><p><b>Requirements:</b></p><ul><li><b>United States Citizenship and an active Secret security clearance</b></li><li>Bachelor&rsquo;s degree in a technical field (CS, IT, Engineering) or equivalent hands-on experience</li><li>Proven ability to implement NIST SP 800-53 and NIST SP 800-171/CMMC in a Linux heavy R&amp;D environment</li><li>Demonstrated receptivity to constructive feedback and a history of working collaboratively with cross-functional technical teams</li><li>IAM Level II certification (e.g., CAP, CASP+ CE, CISM, or CISSP) or the technical aptitude to obtain it within 6 months. ARiA provides support for this certification as part of a mutual commitment to your professional growth and the firm&rsquo;s technical excellence</li><li>Strong proficiency in Linux system administration; ability to troubleshoot security-driven performance issues at the system level</li></ul><p><b>Desirable Skills, Qualifications, and Experience:</b></p><ul><li>Experience with automation (Ansible/Nix) to ensure &quot;compliance as code&quot;</li><li>Familiarity with eMASS, OBMS, and the SPRS reporting system</li><li>A history of streamlining security processes to improve engineering velocity</li><li>Prior ISSM or chief Information Security Officer (CISO) experience</li></ul><p>Job Type: Full-time</p><p>Pay: $135,000.00 - $165,000.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Employee assistance program</li><li>Flexible schedule</li><li>Health insurance</li><li>Health savings account</li><li>Life insurance</li><li>Paid time off</li><li>Parental leave</li><li>Relocation assistance</li></ul><p>Application Question(s):</p><ul><li>This position requires compliance with Federal drug laws, even if such substances are legal in your state. Will you comply with Federal drug laws?</li><li>Due to the nature of the information required to perform this job, U.S. Citizenship is required for this position. Are you a citizen of the United States?</li></ul><p>Location:</p><ul><li>Madison, VA 22727 (Preferred)</li></ul><p>Ability to Commute:</p><ul><li>Madison, VA 22727 (Required)</li></ul><p>Work Location: In person</p>

Crimson Phoenix

Job Description
<br><br>
Cybersecurity Subject Matter Expert (SME)
<br><br>
<b>What You Will Be Doing:</b><br>
Will be a key player in the group's cybersecurity efforts, working across Cyber Defense, Cyber Assurance, Cyber Assessment and Cyber Engineering to ensure a 360-degree security approach.
<br>,
<br>Required Skills
<br><br>
<b>Must Have:</b><br>
MUST HAVE a Current and Active Top Secret SCI with Polygraph, as the customer is NOT sponsoring clearances.
<br>5 years’ experience. 10 years’ experience to qualify for Senior.
<br>Bachelor’s degree in computer science, Cybersecurity, Information Technology, or a related field.
<br>Proficiency in scripting languages (e.g. Python, PowerShell, Bash)
<br>Experience with Splunk Enterprise, to include Splunk certifications
<br>Experience with AWS cloud logging such as CloudTrail and CloudWatch
<br>Experience with network protocols, packet capture analysis and netflow analysis
<br>Experience with security event log analysis, including Windows event logging and Syslog
<br>Strong understanding of threat detection, incident response, vulnerability management, and security architecture.
<br>,
<br>Desired Skills
<br><br>
<b>Nice to Have:</b><br>
Experience with customer's A&A tools.
<br>Previous experience as an ISSM in the IC.
<br>Knowledge of information security standards such as ISO 27001 and NIST
<br>Ability to design, implement and maintain IDS/IPS technologies
<br>Certifications such as OSCP, GIAC, CEH, BCPEN, CompTIA CySA+, PenTest+, (ISC)2 CISSP, CSSLP
<br>Experience with common offensive security tools and methodologies (e.g., Metasploit, Nmap, Burp Suite, Cobalt Strike)
<br>,
<br>About Crimson Phoenix
<br>Crimson Phoenix provides state of the art Information Technology & Intelligence solutions for the Federal Civilian Sector, Department of Defense, and Intelligence Community. We specialize in Web Development, Graphic Design, Software Engineering, System Engineering, Training, Intelligence Analysis, Data Science, and Instructional Systems Design.

Information Systems Security Manager - ISSM

<p></p><div><p><b><i>Belong. Connect. Grow. with KBR!</i></b></p><p>
KBR&rsquo;s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country&rsquo;s most critical role &ndash; protecting our national security.</p><p></p><p><b><i>
Why Join Us?</i></b></p><ul><li>
Innovative Projects: KBR&rsquo;s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.</li></ul><ul><li>
Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.</li></ul><ul><li>
Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.</li></ul><p></p><p><b><i>
Position Summary:</i></b></p><p>
KBR is seeking a Information Systems Security Manager to join the C3BM (Command, Control, Communications, and Battle Management) team in Beavercreek, OH. The Information System Security Manager will provide system authorization support, risk management and business continuity expertise, threat detection and prevention methods, incident response and management methods, auditing, vulnerability management support, and system security documentation.</p><p></p><p><b><i>
Key Responsibilities:</i></b></p><ul><li>Coordinating, executing, and managing cybersecurity assessment &amp; authorization (A&amp;A) related activities supporting IT hardware, software, and connectivity capabilities in support of intelligence data management and analysis requirements</li><li>Provide advice and assistance on all things cyber security for customer-acquired development and systems maintenance projects, driving and monitoring system authorization status of segment components, authoring and coordinating related documentation</li><li>Facilitate, perform, and manage actions necessary to maintain system and capability accreditation status consistent with DoDI 8510.01 (Risk Management Framework (RMF) for DoD Information Technology (IT)), including scanning, auditing, and authoring/coordinating security accreditation-related documentation</li><li>Review and advise on security aspects of contracted maintenance deliverables and proposals</li><li>Perform requirements analysis, design, and integration for complex software applications and collaboration infrastructures</li><li>Participate in the change management process, including reviewing Change Requests and assisting in the assessment of security impact of proposed changes</li><li>Write implementation and design documents describing how security features are implemented</li><li>Create and maintain information system security documentation, Standard Operating Procedures (SOP), and provide guidance on active Plans of Action and Milestones (POA&amp;M)</li><li>Present system maintenance, authorization status, and potential issues to various intelligence and acquisition community audiences</li><li>Keep leadership aware of any roadblocks, issues, or concerns with system authorization status</li></ul><p></p><p><b><i>
Work Environment:</i></b></p><ul><li>
Location: Beavercreek, OH</li><li>
Travel Requirements: 40%</li><li>
Working Hours: Standard</li></ul><p></p><p><b><i>
Qualifications:</i></b></p><p><b><i>
Required:</i></b></p><ul><li>
BS degree in information systems or related technical field</li><li>
10+ years information security experience with extensive RMF knowledge.</li><li>
Technical Knowledge: Expert knowledge of NIST 800-53, RMF process, DoDI 8510.01, eMASS system, classified network operations.</li><li>
DoD 8140 IAT/IAM Level I/II certification</li><li>
Understanding of common operating systems (Windows, Linux/Unix, Cisco IOS/NX-OS)</li><li>
Technical Knowledge: Expert knowledge of NIST 800-53, RMF process, DoDI 8510.01, eMASS system, classified network operations.</li><li>
Maintain authorization packages within eMASS including all required documentation.</li><li>
Good writing and verbal presentation skills. Customer focused, excellent communicator.</li></ul><ul><li>
Collaborate with ISSOs, SCAs, PMs, and other stakeholders by providing necessary guidance and clarifications</li><li>
Experience leading security projects and initiatives.</li><li>
Expert hands-on experience interrupting compliance and vulnerability scanning tool reports from (XACTA, STIGS, ACAS, Trellix (HBSS), and/or other vulnerability scanners)</li><li>
Knowledge of client, server, data storage, and networking technologies</li><li>
Manage multiple information systems requiring continuous authorization to operate, assessments, POA&amp;M mitigation and remediation, Security Assessment Reports (SARs), System Security Plans(SSPs).</li><li>
Understanding of the requirements and standards for Cloud security<br>
Familiarity with DevSecOps principles and Secure Software Development Lifecycle (SSDLC)</li><li>
Ability to troubleshoot, assess root cause, and resolve technical issues<br>
Innovative with strong analytical, problem-solving, organization and interpersonal skills</li><li>
Self-motivated; able to work independently with minimal direction</li><li>
An active TS/SCI clearance is required</li><li>
Must have experience working with Special Access Programs (SAPs)</li></ul><p></p><p><b><i>
Desired:</i></b></p><ul><li>
Advanced degree in a technical field</li><li>
9+ years of IT/security-related experience with recent ISSM experience</li><li>
Sec+/CASP/CISSP certification</li><li>
Software Development in Java, Python, Ruby and/or C++ knowledge</li><li>
Linux Expertise (RedHat/RHEL or CentOS preferred) knowledge.</li><li>
Prior experience with software scanning/static code analysis (e.g. Fortify, SonarQube)</li><li>
Prior experience with cloud and container security tools (e.g. Prisma Cloud/Twistlock, StackRox, Anchore)</li></ul><p></p><p><b><i>
Ready to Make a Difference?</i></b></p><p>
If you&rsquo;re excited about making a significant impact in the field of space defense and working on projects that matter, we encourage you to apply and join our team at KBR. Let's shape the future together.</p><p></p><p><b><i>
KBR Benefits
</i></b></p><p>KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&amp;D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.</p><p></p><p>
Belong, Connect and Grow at KBR<br>
<br>
At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team&rsquo;s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver &ndash; Together.</p><p></p><p>
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.</p></div><p></p>

Senior Information Systems Security Manager (ISSM)

Raytheon

<div><p><b>Date Posted:</b></p>
2026-02-26<p><b>
Country:</b></p>
United States of America<p><b>
Location:</b></p>
US-AZ-TUCSON-M05 ~ 1151 E Hermans Rd ~ BLDG M05 (External Site)<p><b>
Position Role Type:</b></p>
Onsite<p><b>
U.S. Citizen, U.S. Person, or Immigration Status Requirements:</b><b>
</b></p>Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
<p><b>Security Clearance Type:
</b></p>DoD Clearance: Secret<p><b>
Security Clearance Status:
</b></p>Active and existing security clearance required on day 1<p></p><div>
At Raytheon, the foundation of everything we do is rooted in our values and a higher calling &ndash; to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today&rsquo;s mission and stay ahead of tomorrow&rsquo;s threat. Our team solves tough, meaningful problems that create a safer, more secure world.</div><p></p><div><div><div><div><div><div><div><div><div><p>
Our cybersecurity team is seeking a <b>Program Information Systems Security Manager (ISSM) </b>to support our team <b>100% onsite </b>at our facility in <b>Tucson, Arizona.</b></p><p></p><p>
The <b>Program Information Systems Security Manager</b> is responsible for compliance oversight, assessment, and operations of systems under their purview. They may be assigned to a single large-scale program or oversee multiple programs.</p><p></p><p>
ISSM also has cognizance of all collateral Classified Information System (CIS) at the Site per Commercial and Government Entity (CAGE) code as stipulated by various US Government requirements including (but not limited to):</p><p>
National Industrial Security Operating Manual (NISPOM) and related documentation such as:</p><ul><li><p>
Risk Management Framework (RMF),</p></li><li><p>
Baseline Technical Security Configuration Standards,</p></li><li><p>
Defense Counter-Intelligence Security Agency (DCSA)</p></li><li><p>
Assessment and Authorization Process Manual (DAAPM)</p></li><li><p>
Customer/contract specific Cybersecurity regulations.</p></li></ul><p></p><p>
Components of the cybersecurity (CS) program include Assessment and Authorization (A&amp;A) activities (documentation preparation, system configuration/validation, certification testing, etc.), security sustainment activities (hardware change management, software change management, account management, media protection, user interface, file transfers, etc.), conducting self-inspections, and delivering information systems security education and awareness.</p><p></p><p>
You will conduct recurring Cybersecurity reviews on information systems in accordance with DoD Manuals, NIST Special Publications, customer directives, and company policies as applicable.</p><p></p><p>
You are responsible for the execution of the Raytheon Continuous Monitoring Plan as required by CA-2 Security Assessments. You&rsquo;ll serve as subject matter experts (SME) on a broad range of Cybersecurity topics. You may represent the Cybersecurity organization and business unit to external Cybersecurity counterparts.</p><p></p><p><b>
What You Will Do
</b></p><ul><li><p>Cybersecurity Site ISSMs are required to maintain IAM Level III certification commensurate with their role as required by DoDD 8140 (8570).</p></li></ul><ul><li><p>
Complete all DCSA and Raytheon GSS required training within 6 months of appointment (annual requirements thereafter).</p></li><li><p>
Accountability for all systems under site CAGE: metrics, eMASS, Raytheon business process (RCAST), Continuous Monitoring (ConMon) as described by Sr. ISSM</p></li><li><p>
Maintaining a working knowledge of all CIS functions, security policies, technical security safeguards, and operational security measures.</p></li><li><p>
Interactions with DCSA SCA/ISSP to track items including, but not limited to, upcoming authorizations (ATO), new technologies solutions (i.e., new SIEM, OS, etc.), policy interpretations (in conjunction with Sr. ISSM), and onsite A&amp;A.</p></li><li><p>
Developing, maintaining, and updating, in coordination with all system stakeholders (CS Manager, ISO, DT, etc.), applicable site POAM(s) to identify system weaknesses, mitigating actions, resources, and timelines for corrective actions.</p></li><li><p>
Coordinating DCSA SVA preparation activities for assigned CAGE in conjunction with site FSO/CS Manager. AS</p></li></ul><p></p><p><b>
Important note: </b>Within six months of hire date, you must obtain and maintain a Security professional certification commensurate with IAM Level III certification commensurate with your role as a Site ISSM as required by DoDD 8140 (8570) if you do not already have this certification.</p><p></p><p><b>
Qualifications You Must Have
</b></p><ul><li><p>Typically a Bachelors Degree or equivalent experience and minimum 8 years prior relevant experience, or an Advanced Degree in a related field and minimum 5 years experience</p></li><li><p>
Experience supporting cybersecurity compliance as stipulated by DCSA Assessment and Authorization Process Manual (DAAPM), Joint SAP Implementation Guide (JSIG), and/or National Industrial Security Program Operating Manual (NISPOM) regulations</p></li><li><p>
Direct leadership or project/program management experience</p></li><li><p>
IAM Level I certification (Security+ or other)</p></li><li><p>
Relevant Experience Considered:</p><ul><li><p>
Cybersecurity, systems security or hardening</p></li><li><p>
Information Technology</p></li><li><p>
Compliance-based auditing using the Risk Management Framework (RMF) and/or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPPA</p></li><li><p>
Experience working with and/or supporting computer technologies (such as: databases, operating systems, computer network hardware, software programs, hardware troubleshooting or electronics)</p></li><li><p>
Physical security/security, policework/criminal justice, investigations, or Border Patrol</p></li><li><p>
Project or program management, office management, senior administration, or account management</p></li></ul></li></ul><p></p><p><b>
Qualifications We Prefer</b></p><ul><li><p>
Master&rsquo;s Degree in Computer Science, Information Systems, Information Technology, Cyber Security, Criminal Justice, Business or other relevant degree</p></li><li><p>
Experience with various information system security tools that address vulnerability analysis and mitigation. These may include Splunk, Forcepoint, Ivanti, Tenable, ACAS, HBSS, etc.</p></li><li><p>
Experience in the oversight and execution of the Assessment &amp; Authorization processes (Certification &amp; Accreditation), as defined in JSIG/RMF</p></li><li><p>
Experience in the execution and management of Information System&rsquo;s (IS) incident response and administrative inquiries/investigations in collaboration with the Investigations department</p></li><li><p>
Experience in and execution of a continuous monitoring/improvement program (to include but not limited to self-inspections, security control assessments, training, log management systems, automated inventory utilities, etc.)</p></li><li><p>
Experience providing technical security expertise and oversight for complex, cross-domain, heterogeneous classified networked environments in collaboration with internal/external Customers, Information Technology (IT) and other Raytheon Business Units</p></li><li><p>
Experience working with the customer, both internal and external in the development of Basis of Estimates (BOE's) and contract negations</p></li><li><p>
Experience with any of the following: NISPOM, JAFAN 6/3, DCID 6/3, JSIG/RMF, and ICD-503 or equivalent requirements to include technical computer/network system auditing</p></li><li><p>
Experience in professional engagements with internal and external customers (i.e., AOs, DAOs, SCAs, Program Managers, etc.), to include negotiating controls/requirements with government Contracting Activities</p></li></ul><p></p><p><b>
What We Offer</b></p><p>
Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Trust, Respect, Accountability, Collaboration, and Innovation.</p><p>
Relocation Non-Eligible &ndash; Relocation assistance not available</p><p></p><p><b>
Learn More &amp; Apply Now!</b></p><p>
Please consider the following role type definition as you apply for this role:</p><ul><li><p>
Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products.</p></li></ul><p></p><p>
We are RTX</p><p></p><p>
#LI-Onsite</p></div></div></div></div></div></div></div></div></div><p></p><p><b><i>
As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.</i></b></p><p></p>
The salary range for this role is 107,500 USD - 204,500 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate&rsquo;s work experience, location, education/training, and key skills.<p></p>
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.<p></p>
Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company&rsquo;s performance.<p></p>
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.<p></p>
RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.<p></p><p><i>
RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans&rsquo; Readjustment Assistance Act.</i>
</p><p></p><p><b>Privacy Policy and Terms:</b></p><p>
Click on this link to read the Policy and Terms</p></div>

Program Information System Security Manager (ISSM) - Tucson, AZ

<div><p><b>Overview:</b></p><p>
Draper is an independent, nonprofit research and development company headquartered in Cambridge, MA. The 2,000+ employees of Draper tackle important national challenges with a promise of delivering successful and usable solutions. From military defense and space exploration to biomedical engineering, lives often depend on the solutions we provide. Our multidisciplinary teams of engineers and scientists work in a collaborative environment that inspires the cross-fertilization of ideas necessary for true innovation. For more information about Draper, visit www.draper.com.</p><p></p><p><b>
Job Description Summary:</b></p>
The Supervisor 2, Information Systems Security Manger (ISSM) will lead the Information Assurance (IA) efforts for multiple Department of Defense (DoD) and/or Special Program information systems. The Supervisor 2, ISSM manages Information System Security Officers as direct reports to achieve favorable authorization decisions. The Supervisor 2, ISSM performs the development, implementation, and evaluation of classified information systems for assigned programs in compliance with the Risk Management Framework (RMF) as outlined in either the DAAG, JSIG, or ICD 503.<p></p><p><b>
Job Description:</b></p><p><b>
Duties/Responsibilities</b></p><ul><li><p>
Use cyber defense tools for continuous monitoring and analysis of systems to identify malicious activity.</p></li><li><p>
Document and escalate incidents that may cause ongoing and immediate impact to the environment.</p></li><li><p>
Perform cyber defense trend analysis and reporting.</p></li><li><p>
Work with stakeholders to resolve computer security incidents and vulnerability compliance.</p></li><li><p>
Provide advice and input for Disaster Recovery, Contingency, and Continuity of Operations Plans.</p></li><li><p>
Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.</p></li><li><p>
Perform risk analysis whenever an application or system is implemented or changed.</p></li><li><p>
Ensure successful implementation and functionality of security requirements and appropriate IT policies and procedures.</p></li><li><p>
Leads assigned team to facilitate effective execution of the Risk Management Framework (RMF).</p></li><li><p>
Mentor and train Information System Security Officer personnel.</p></li><li><p>
Perform other duties as assigned.</p></li></ul><p><b><br>
Skills/Abilities</b></p><ul><li><p>
Ability to configure and review security functions of information systems.</p></li><li><p>
Ability to conduct security analyses, including security configurations and risk assessments.</p></li><li><p>
Ability to lead a team of Information System Security Officers and monitor performance.</p></li><li><p>
Familiarity working with DoD/IC Security Control Assessors.</p></li><li><p>
Familiarity with C2G/C2C interconnected systems and/or Wide Area Network (WAN) environments.</p></li><li><p>
Understanding of virtual environments and containerization tools/technologies.</p></li><li><p>
Ability to identify systemic security issues based on the analysis of vulnerabilities and configuration data.</p></li><li><p>
Ability to apply techniques for detecting host and network based intrusions using intrusion detection technologies.</p></li><li><p>
Ability to function effectively in a dynamic, fast paced environment.</p></li><li><p>
Strong interpersonal skills with effective verbal and written communication skills.</p></li><li><p>
Clear and structured thought processes and coherent decision making skills.</p></li></ul><p><b><br>
Education</b></p><ul><li><p>
Bachelors Degree in Computer Science/Cybersecurity/Information Technology or equivalent field of study required.</p></li></ul><p></p><p><b>
Experience</b></p><ul><li><p>
3-5 years of experience as an ISSM, or performing as an ISSO, implementing DCSA Assessment and Authorization Process Manual (DAAG), DoD Joint Special Access Program Implementation Guide (JSIG), and/or Intelligence Community Directive (ICD) 503 Risk Management, Certification and Accreditation requirements.</p></li></ul><p></p><p><b>
Additional Job Description:</b></p><p>
Applicants selected for this position will be required to obtain and maintain a government security clearance.&rdquo;</p><p></p><p>
Current in scope Top Secret security clearance is required.</p><p></p><p>
Connect With Draper for Future Opportunities! If you don't find the right posting in our Career Opportunities, you may submit your resume for future consideration.</p><p></p><p><b>
Job Location - City:</b></p>
Cambridge<p></p><p><b>
Job Location - State:</b></p>
Massachusetts<p></p><p><b>
Job Location - Postal Code:</b></p>
02139-3563<p></p><p>
The US base salary range for this full-time position is</p>
$100,000.00 - $250,000.00<p><i>
Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. </i><i>Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Union ranges will be in compliance with the collective bargaining agreement's approved rates by location and role.</i><i> </i><i>Your recruiter can share more about the specific salary range for your preferred location during the hiring process.</i><i> </i><i>Please note that the compensation details listed in US role postings reflect the base salary only, and does not include bonuses or benefits.</i></p><p></p><p>
Our work is very important to us, but so is our life outside of work. Draper supports many programs to improve work-life balance including workplace flexibility, employee clubs ranging from photography to yoga, health and finance workshops, off site social events and discounts to local museums and cultural activities. If this specific job opportunity and the chance to work at a nationally renowned R&amp;D innovation company appeals to you, apply now www.draper.com/careers.</p><p></p><p>
Draper is committed to creating an inclusive environment. We understand the value of inclusivity and its impact on a high-performance culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, national origin, veteran status, or genetic information. Draper is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation, please contact hr@draper.com.</p></div>

Information System Security Manager 2

Search 10000+ Information systems security manager jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 information systems security manager jobs Near Me

Information Systems Security Manager 2

Information Systems Security Manager (ISSM)

Information Systems Security Manager (ISSM)

Information Systems Security Manager - ISSM

Senior Information Systems Security Manager (ISSM)

Program Information System Security Manager (ISSM) - Tucson, AZ

Information System Security Manager 2