Site Lead - Information Systems Security Manager (issm) - Andover, Ma

RTX RTX · Aerospace · andover, MA +1 · Digital Technology

RTX is seeking a Site Lead and Information System Security Manager (ISSM) for their Andover, MA facility. This role is responsible for managing cybersecurity support across multiple security environments, policy, compliance, operations, and security awareness. The ISSM will provide advice on risk levels, security posture, and interface with internal and external organizations. A key requirement is obtaining a Security professional certification commensurate with DoD 8570.01-M IAM level III within six months of hire.

What you'd actually do

  1. ISSM of record for all information systems within the site, appointed in writing by Cybersecurity leadership to the Cognizant Security Agency (CSA)
  2. Focal point of contact for partnering departments and Customers at the site level
  3. Participates in interdepartmental projects and provides council on Cybersecurity policy and procedures
  4. Senior Manager with direct supervision of front-line managers
  5. Trains and mentors subordinates, provides recurring performance feedback

Skills

Required

  • Cybersecurity
  • systems security or hardening
  • Information Technology
  • network security
  • systems security
  • architecture
  • topology
  • protocols
  • components
  • principles
  • configuring operating systems
  • auditing operating systems
  • Risk Management Framework (RMF)
  • DCSA Assessment and Authorization Process Manual (DAAPM)
  • Joint SAP Implementation Guide (JSIG)
  • National Industrial Security Program Operating Manual (NISPOM)
  • SNAC guides
  • Nessus
  • SCAP
  • ICD-503
  • ACAS
  • FAA
  • Payment Card Industry (PCI)
  • ISO 9001 Quality Management standards
  • HIPPA
  • Physical security
  • security
  • policework
  • criminal justice
  • investigations
  • Border Patrol
  • Project management
  • program management
  • account management
  • leading direct reports
  • managing teams
  • mentoring teams
  • IAM Level I certification (Security+ or other)

Nice to have

  • executing leadership and managerial duties
  • performance development
  • career coaching
  • mentoring
  • training
  • resource management
  • budget management
  • oversight and execution of the Assessment & Authorization processes (Certification & Accreditation)
  • execution and management of Information System’s (IS) incident response
  • administrative inquiries/investigations
  • oversight and execution of a continuous monitoring/improvement program
  • self-inspections
  • security control assessments
  • training
  • log management systems
  • automated inventory utilities
  • technical security expertise
  • oversight for complex, cross-domain, heterogeneous classified networked environments
  • various types of special test equipment (STE)
  • platform IT
  • UNIX
  • Linux

What the JD emphasized

  • Active and transferable U.S. government issued security clearance is required prior to start date
  • U.S. citizenship is required
  • Within six months of hire date, you must obtain and maintain a Security professional certification commensurate with a DoD 8570.01-M IAM level III certified credentials (CISSP, CISM, GSLC or CCISO), if you do not already have this certification.