Cyber Security Product RISK Manager

airbusspaceanddefense; Arlington (VA); On-site; USD 90,000 - 115,000; Full time

Job summary

airbusspaceanddefense is seeking a Cyber Security Product Risk Manager in Arlington, VA to oversee the cybersecurity of spacecraft products. You will ensure compliance with hardening requirements and manage multiple cybersecurity initiatives.

The ideal candidate will have a Bachelor's degree in a STEM field or equivalent experience, extensive knowledge of project management, and familiarity with NIST 800-53 controls. Airbus offers an inclusive environment with equal opportunity for all candidates.

Qualifications

• Bachelor's degree in a relevant field or 5 years of cybersecurity experience.
• Familiarity with NIST 800-53 controls.
• Minimum of 5 years project management experience.

Responsibilities

• Ensure cybersecurity of products throughout the lifecycle.
• Develop methodology for detecting security events.
• Manage multiple product initiatives across teams.

Skills

Cybersecurity

Risk Management Framework (RMF)

Project Management

NIST 800-53

Communication Skills

Education

Bachelor's degree in a STEM field or equivalent experience

Tools

Microsoft Office

Job description

Multiple Locations Available: Arlington, VA or Herndon, VA

Position Summary

Airbus US is looking for a Cyber Security Product Risk Manager who works with specialists from the Cyber, Space Engineering, and Contracts departments to ensure our products meet the applicable hardening requirements with a view that cyber risks are identified and controlled during the entire product life cycle. The products include Spacecraft and associated ancillary components.

Primary Responsibilities

• Responsible for the Cyber security of our products.
• Develop methodology to detect security events on hardware, including PCB analysis, and debug port detection.
• Extract and reverse engineer firmware, exploit development.
• Knowledge of Space BUS architecture, Secure boot.
• Production of System Security Plan (SSP). These artifacts include the SSP, Risk Assessment Report, Security Controls Traceability Matrix, and Plans of Actions & Milestones (POA&Ms). Familiarity with the NIST 800-53 controls (as applied through CNSSI-1253).
• Work as an individual contributor representing the Cyber team within the Space engineering team to architect, implement, and execute RMF CyberSecurity, CyberResilience, Cyber Survivability requirements of satellite systems, onboard computers, and flight software.
• All candidates must be capable of supporting cybersecurity assessment events where they work closely with systems administrators and other cyber personnel and engineering personnel (ISSOs, ISSMs) to satisfactorily demonstrate that all applicable security controls are implemented within the system boundary.
• Proactively engage with Compliance and Legal to ensure adherence with all external and internal compliance and regulatory requirements.
• Establish strategic peer‑to‑peer partnerships with suppliers, manufacturers, and other industry experts to develop new products or improve existing products while ensuring applicable boundaries/firewalls are respected.
• Manage multiple product and capability initiatives to drive clear prioritization and direction to cross‑functional teams including Cyber Security and Space Engineering from Airbus US as well as key client representatives.
• Provide leadership and serve as the escalation point for all issues arising across functional teams in assigned workstreams.
• Provide updates to senior leaders and other internal and external stakeholders on integration project statuses regularly.
• Actively seek and gather customer/stakeholder feedback and apply it to product development as appropriate.
• Develop business opportunities through peer‑to‑peer relationships with industry influencers and government decision‑makers.
• Other projects as assigned.

Primary Qualifications

Education

• Bachelor's Degree in STEM field (Cyber security, Electrical engineering, Aeronautical engineering, Aerospace Engineering) or equivalent experience (5 years Cybersecurity experience in the aerospace industry or military).

Experience

• Familiarity with the NIST 800-53 controls (as applied through CNSSI-1253) and Development Security operations.
• Extensive experience of RMF implementation and defensive Cyber operations.
• Minimum of 5 years Project Management experience that includes:

1. Leading large complex programs over multiple releases.
2. A proven track record of launching new products or applications with demonstrated business impact.
3. Ability to influence and coordinate multi‑functional teams.

Qualifications

• Demonstrated experience of effective verbal and written communication skills across functions and multiple levels of leadership.
• Demonstrated ability to manage complex initiatives and projects in a matrixed, high‑speed, and quickly changing business environment.
• Outstanding communication, relationship‑building influencing, and collaboration skills.
• Demonstrated strong quality/process improvement experience, with relevant examples that improved business performance and customer experience.
• Advanced problem‑solving skills with the ability to develop innovative solutions in a fast‑changing environment.

Communication Skills (Spoken, Written, Influencing, Proficiency in Other Languages)

• Excellent communication skills, both verbal and written.
• Fluent U.S. English speaker.

Technical Systems Proficiency

• Requires advanced computer skills with a focus on Microsoft Office applications.

Travel Required

• Up to 25% travel.

Eligibility

• US citizenship is required.

Clearance

• Ability to obtain and maintain a Government security clearance at the facility clearance level.

Equal Opportunity

Airbus provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, pregnancy, marital status, veteran status, or other legally protected status. In addition to federal law requirements, Airbus complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, demotion, termination, layoff, recall, transfer, leaves of absence, compensation, benefits, and training. Airbus expressly prohibits any form of workplace harassment based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, pregnancy, marital status, veteran status or other legally protected status.

Airbus does not sponsor visas for US positions unless specified. Only applicants with current work authorization will be considered. Airbus does not offer tenured or guaranteed employment. Employment with Airbus is at will, meaning either the company or the employee can terminate the employment relationship at any time, with or without cause, with or without notice. Airbus reserves the right to revise or change job duties and responsibilities as the need arises. This position description does not constitute a written or implied contract of employment.

By submitting your resume or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus. Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation, or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to [e-mail].

www.airbusus.com