Information Systems Security Manager (TS//SCI)

The Role

As an Information Systems Security Manager (ISSM) at K2 Space you will oversee and maintain compliance with cybersecurity regulations and best practices for our space systems and infrastructure. The ISSM will be responsible for developing, implementing, and managing security policies, risk assessments, and security controls to protect classified and unclassified information systems. 

Our ideal candidate is self-motivated and able to coordinate with our national security stakeholders to meet their unique requirements for safeguarding classified information across the spectrum of classification levels. The selected candidate will provide Cyber Security technical leadership as the ISSM. The candidate will manage internal/external customers’ expectations for security architecture and provide Cyber Security expertise as the Subject Matter Expert on ongoing projects by executing on program performance, delivery, and milestone completion including Assessment & Authorization (A&A) events. Furthermore, the ISSM will provide Cyber Security input and support for the implementation and test of secure operating systems/networks, DevSecOps, and cloud solutions. K2 Space is a fast-paced startup environment and as ISSM you must be able to quickly adapt and implement solutions in a dynamic workplace.  

Responsibilities

• Build and manage a team of highly capable Information System Security Officers.
• Develop and maintain a formal Information Systems Security Program.
• Provide Ensure compliance with NIST, RMF, and other relevant cybersecurity frameworks.  
• Develop, implement, and enforce information security policies and procedures.  
• Conduct risk assessments, vulnerability analyses, and security audits.  
• Manage security authorization packages and maintain system accreditations.  
• Institute and implement a Configuration Control Board (CCB) charter.
• Ensure that all ISSOs, network administrators, System Administrators and other cyber security personnel receive the necessary technical and annual training to carry out their duties.
• Coordinate with CPSO on approval of external information systems (e.g., guest systems, interconnected system with another organization).
• Work closely with IT, engineering, program management and government agencies to ensure secure operations.  
• Provide security training and awareness programs for employees.  
• Investigate and respond to security incidents and implement corrective actions. 

Qualifications 

• Master’s degree in cybersecurity, IT, or a related field +4 years’ experience or Bachelor’s degree in cybersecurity, IT, or a related field, + 6 years’ experience.  
• 5+ years working in information assurance for national security systems. 
• Hands-on experience with NIST SP 800-53, DoDI 8510.01, CNSSI 1253, JSIG/ICD 503, and STIG/SRG application and other DoD cybersecurity policies.  
• Proficiency in vulnerability and compliance tools: Tenable Nessus, SCAP, DISA STIG Viewer, log/monitoring, and familiarity with patch management.
• Experience developing and maintaining SSP, SAR/SAP, POA&M, and RMF evidence with strong technical writing skills.
• Knowledge of network security, Windows/Linux hardening, virtualization, endpoint protection, identity & access management, encryption/key management, and secure configuration baselines.
• Strong understanding of system security architecture and risk management.  
• Experience as an ISSM, ISSO, or ISSE.
• Current DoD 8570/8140 Tier III certification or higher (CISSP, CISM, etc.).
• Active TS/SCI Clearance, and willingness to submit to a CI polygraph
• Exceptional written and verbal communication skills 

Nice to Have 

• Additional cybersecurity certifications (CAP, CEH, GSEC, GSLC).
• Experience supporting Defense and Intelligence Community programs.
• Familiarity with secure cloud and hybrid environments (e.g., DoD Cloud SRG, IL2–IL6, GovCloud, IC ITE).
• Experience in standing up new secure networks at a commercial organization (SCI or SAP). 
• Experience obtaining Authority to Operate (ATO) of an operational aerospace system (satellite, aircraft, etc.).  

Compensation and Benefits:

• Base salary range for this role is $160,000 - $200,000 + equity in the company
• Salary will be based on several factors, including, but not limited to: knowledge and skills, education, and experience level
• Comprehensive benefits package including paid time off, medical/dental/vision coverage, life insurance, paid parental leave, and many other perks