Cybersecurity Requirements and Data Protection Lead

NASA Jet Propulsion Laboratory (Caltech); Pasadena (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

NASA Jet Propulsion Laboratory is seeking a senior leader within Governance, Risk, and Compliance (GR&C) to develop and maintain the cybersecurity requirements framework for missions and business operations. The role supports the Privacy Manager and CUI Liaison, overseeing sensitive data lifecycle and ensuring alignment with NASA, federal, and international regulations.

The position emphasizes strategy, policy development, risk assessment, and cross-functional leadership to translate complex

Responsibilities

• Strategy & Policy: Develop and maintain JPL’s cybersecurity requirements framework and policies to support mission-critical functions.
• Privacy & Data Protection: Provide oversight for sensitive data in support of JPL’s Privacy Manager and CUI Liaison; guide strategies for Data Loss Prevention, encryption, and Privacy by Design.
• Risk Management: Conduct comprehensive risk assessments across IT/OT systems, supply chains, acquisitions, and external subcontracts.
• Compliance & Frameworks: Ensure alignment with standards such as NIST 800-53, GDPR/CCPA, and CMMC; manage data mapping, classification, and ethical data usage.
• Cross-Functional Leadership: Translate complex regulatory requirements into actionable technical guidance and collaborate across teams.

Job description

As a senior leader within JPL’s Governance, Risk, and Compliance (GR&C) team, you will develop and maintain the cybersecurity requirements framework for JPL’s missions and business operations. You will support the JPL Privacy Manager and Controlled Unclassified Information (CUI) Liaison, oversee the lifecycle of sensitive data and ensure alignment with NASA, federal, and international regulations.

Key Responsibilities:

Strategy & Policy: Develop and maintain JPL’s cybersecurity requirements framework and policies to support mission-critical functions. Privacy & Data Protection: Provide oversight for sensitive data in support of JPL’s designated Privacy Manager and CUI Liaison; guide strategies for Data Loss Prevention (DLP), encryption, and "Privacy by Design." Risk Management: Conduct comprehensive risk assessments across information and operational technology (IT/OT) systems, supply chains, acquisitions, and external subcontracts. Compliance & Frameworks: Ensure institutional alignment with standards such as NIST 800-53, GDPR/CCPA, and CMMC; manage data mapping, classification, and ethical data usage. Cross-Functional Leadership: Translate complex regulatory requirements into tec