R

RTX

Manufactures jet engines, avionics, missiles

Information Systems Security Manager

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeCedar Rapids, IA, USA$107.5k - $204.5k

About the Job

Requirements

  • A university degree and at least 8 years of relevant experience, or an advanced degree in a related field and at least 5 years of experience.
  • U.S. citizenship is required; only U.S. citizens are eligible to obtain the required clearance.
  • An active DoD Top Secret security clearance is required on day one.
  • An IAM Level III certification compliant with DoD 8570 / DoD 8140, such as CISSP, CISM, or GSLC, is required.
  • Experience performing ISSM responsibilities for classified or controlled information systems is required.
  • Advanced knowledge of the Risk Management Framework (RMF) and DoD system authorization processes is required.
  • Experience executing authorization and continuous monitoring using JSIG and/or DAAG is required.
  • Knowledge of cybersecurity regulations, contractual requirements, and DD Form 254 interpretation is required.
  • Experience supporting inspections, assessments, and audit activities is required.
  • The ability to independently assess risk and communicate cybersecurity status to leadership is required.
  • Willingness to travel domestically up to 20%, generally supporting other company facilities, is required.

Responsibilities

  • Own cybersecurity responsibilities for assigned information systems, ensuring security objectives are achieved and organizational risk is managed.
  • Serve as the primary cybersecurity authority for inspections, assessments, audits, and continuous monitoring, leading preparation, execution, and response activities to maintain authorization and inspection readiness.
  • Execute and maintain system authorization using the Risk Management Framework and applicable guidance, including the Joint Special Access Program Implementation Guide for Special Access Program systems and the DCSA Assessment and Authorization Guide for DoD collateral systems.
  • Maintain awareness and working knowledge of DD Form 254s and contractual security requirements, ensuring cybersecurity controls, inspection scope, and authorization boundaries align with approved mission and program objectives.
  • Develop, maintain, and validate cybersecurity plans, authorization artifacts, and compliance documentation to support audit-ready operations.
  • Identify, assess, and communicate cybersecurity risk to senior leadership and Authorizing Officials, including the impact of system changes, vulnerabilities, inspection findings, and authorization conditions.
  • Lead continuous monitoring activities, including evaluation of security posture, validation of control effectiveness, and tracking of security-relevant data.
  • Develop, manage, and drive closure of Plans of Action and Milestones resulting from inspections, assessments, and continuous monitoring activities.
  • Lead and oversee cybersecurity Change Control Boards, evaluating proposed system changes for security impact, authorization implications, and alignment with Risk Management Framework requirements.
  • Execute or coordinate corrective and protective security actions resulting from inspections, continuous monitoring, or identified cybersecurity incidents.
  • Engage with Program Managers to integrate cybersecurity requirements into program execution, schedules, and decision-making, and address risk impacts to cost, scope, and mission delivery.
  • Collaborate with cross-functional teams, including Information Technology, Facilities, and Industrial Security, to integrate cybersecurity requirements into technical, physical, and operational environments.
  • Coordinate with other cybersecurity teams across the enterprise to ensure consistent implementation of cybersecurity processes, standards, and authorization practices.
  • Provide technical direction and mentoring to Information Systems Security Officers to ensure consistent execution of Risk Management Framework activities, inspection readiness, and quality of authorization artifacts, while remaining accountable for cybersecurity outcomes.
  • Prepare and deliver cybersecurity status reporting to senior leadership, summarizing authorization posture, inspection readiness, risk trends, Plans of Action and Milestones, and significant cybersecurity issues.

Desired Qualifications

  • A master's degree in Cybersecurity, Computer Science, or a related field.
  • Experience as the primary Information Systems Security Manager for Special Access Program and/or DoD collateral systems.
  • Experience owning authorizations to operate and driving Plans of Action and Milestones closure.
  • Experience mentoring Information Systems Security Officers and providing technical oversight.
  • Experience leading Change Control Boards.
  • Experience working with cross-functional teams and enterprise cybersecurity organizations.
  • Strong written and verbal communication skills for senior leadership briefings.

About the Company

RTX

Manufactures jet engines, avionics, missiles

RTX operates in aerospace and defense with three main units: Pratt & Whitney jet engines, Collins Aerospace avionics and flight systems, and Raytheon defense systems. Jet engines provide thrust for commercial and military aircraft, avionics manage cockpit controls and navigation, and Raytheon builds missiles, radar, and sensing platforms. It differentiates itself by offering an integrated, end-to-end portfolio across both commercial aviation and national defense under one corporate roof, built on the legacy of Raytheon and UTC. Its goal is to help customers fly more efficiently and protect nations by advancing propulsion, electronics and defense tech for civilian and security needs.

Company size
10,001+
Company stage
IPO
Headquarters
Arlington County, VA
Founded
2022

Recently Posted Jobs

Explore more opportunities at RTX

See more jobs