Classified Cybersecurity Manager (Onsite)

Position Details

Location: Westford, MA (7 Technology Park Dr, BLDG 7). Position Type: Onsite. U.S. citizenship required; active and transferable DoD Secret security clearance required on day one. Domestic travel up to 20%.

About the Role

Collins Aerospace is a leader in technologically advanced, intelligent solutions that help redefine the aerospace and defense industry. The Cybersecurity Manager provides tactical leadership and oversight for cybersecurity professionals supporting classified and controlled information systems across assigned programs. This role is accountable for the effective execution of system authorization, continuous monitoring, inspection readiness, and risk management activities. The Cybersecurity Manager supervises and develops cybersecurity personnel while ensuring disciplined implementation of security processes, high-quality authorization artifacts, and sustained operational compliance. Responsibilities include overseeing the application and maintenance of cybersecurity requirements in accordance with applicable government frameworks and guidance, including RMF, JSIG, NIST publications, NISPOM, and the DCSA Assessment and Authorization Guide (DAAG). Through direct oversight of team activities, review of authorization documentation, and validation of control implementation, the manager ensures consistent assessment practices and sustained inspection readiness across supported programs.

Responsibilities

• Provide leadership and oversight for cybersecurity activities across assigned classified information systems, ensuring effective risk management, sustained compliance, and inspection readiness.
• Serve as the senior cybersecurity authority for inspections, assessments, audits, and continuous monitoring, directing preparation, execution, response efforts, and timely closure of findings and POA&Ms.
• Oversee and validate system authorization activities under RMF, including application of JSIG and DAAG guidance where applicable, ensuring quality authorization artifacts and audit-ready documentation.
• Lead cybersecurity Change Control Boards (CCBs) and evaluate proposed system changes for security impact, authorization implications, and risk posture.
• Assess and communicate cybersecurity risks to senior leadership and Authorizing Officials, translating technical issues into mission, cost, and operational impact.
• Integrate cybersecurity requirements into program execution by partnering with Program Managers and cross-functional stakeholders to align security with mission objectives.
• Directly manage cybersecurity personnel, including performance evaluations, goal setting, coaching, corrective guidance, and accountability for execution quality.
• Develop team capability through mentoring, structured development planning, certification progression, and required training compliance.
• Balance workloads and allocate resources across supported programs to meet operational demands and inspection timelines.
• Prepare and deliver cybersecurity status briefings summarizing authorization posture, inspection readiness, risk trends, resource needs, and overall team performance.

Requirements

• Typically requires a University Degree and a minimum of 8 years of relevant experience, or an Advanced Degree in a related field with a minimum of 5 years of relevant experience.
• U.S. Citizen with active and transferable U.S. government issued security clearance required prior to start date.
• Active DoD Secret Security Clearance on day one.
• IAM Level III certification compliant with DoD 8570 / DoD 8140 (e.g., CISSP, CISM, GSLC).
• Demonstrated experience performing ISSM responsibilities for classified or controlled information systems.
• Advanced knowledge of RMF and DoD system authorization processes, including experience executing authorization and continuous monitoring activities under JSIG and/or DAAG guidance.
• Working knowledge of cybersecurity regulations, contractual security requirements, and DD Form 254 interpretation.
• Experience supporting inspections, assessments, and audit activities within classified environments.
• Proven ability to assess cybersecurity risk and communicate authorization status and