Cybersecurity - Information System Security Officer (ISSO)At Boeing, we innovate and collaborate to make the world a better place. We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.Boeing Classified Cybersecurity is currently seeking a highly motivated Cybersecurity - Information System Security Officer (ISSO) to join their team in Mesa, AZ. The selected candidate will support implementation and sustainment of DFARS/NIST SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) controls for systems handling Controlled Unclassified Information (CUI), ensuring continuous compliance, risk management, and overall program management of a large portfolio of systems.The ISSO will develop and maintain security documentation (including System Security Plans and POA&Ms), coordinate audits and remediation with program stakeholders and assessors, and drive ongoing monitoring to protect CUI in accordance with DFARS and CMMC requirements.Position Responsibilities:Performs security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standardsOversees configuration management of assigned systems; auditing systems to ensure security posture integrityLeads staff with assessments and test/analysis data to document state of compliance with security requirementsConducts risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activitiesConducts periodic hardware/software inventory assessmentsServes as organization spokesperson on advanced projects and programsActs as advisor to management and customers on advanced technical research studiesInterfaces with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirementsBasic Qualifications (Required Skills/Experience):IAM Level 1 DoD (previously ) compliant certification (i.e. CAP, Security+ CE, CISSP, CASP, CISM, GSLC, CCP)3+ years of experience with cybersecurity policies and implementation of Risk Management Framework (RMF): e.g.
DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series1+ years of experience implementing and sustaining Defense Federal Acquisition Regulation Supplement (DFARS) /National Institute of Standards and Technology (NIST) SP 800-171 controls and mapping to Cybersecurity Maturity Model Certification (CMMC) requirementsPreferred Qualifications (Desired Skills/Experience):3+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs3+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS3+ years of experience assessing and documenting test or analysis data to show cyber security compliancePay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $105,400 - $142,600Applications for this position will be accepted until May 20, 2026This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a "U.S.
Person" as defined by 22 C.F.R. §120.62 is required. "U.S. Person" includes U.S. Citizen, U.S.
National, lawful permanent resident, refugee, or asylee.This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)Visa Sponsorship: Employer will not sponsor applicants for employment visa status.