Cybersecurity Requirements and Data Protection Lead

NASA Jet Propulsion Laboratory; Pasadena (CA); On-site; USD 160,000 - 197,000; Full time

Benefits offered by this job

Health benefits

Dental

Vision

Wellbeing programs

Retirement plans

Paid time off

Learning opportunities

Rideshare

Childcare

Flexible schedule

Parental leave

Job summary

NASA Jet Propulsion Laboratory in Pasadena, California, seeks a senior leader to develop and maintain the cybersecurity requirements framework for JPL missions and operations.

You will oversee privacy data, lead risk assessments across IT/OT, ensure alignment with NIST 800-53, GDPR/CCPA and CMMC, and collaborate with legal, IT, and mission leads to translate regulatory requirements into technical architectures.

Qualifications

• Typically requires a bachelor's degree in Cybersecurity, Computer Science, Information Technology, or similar discipline with a minimum of 9 years of cybersecurity experience; master's degree in similar discipline with a minimum of 7 years of cybersecurity experience; or PhD in similar disciplines with a minimum of 5 years cybersecurity experience.
• Mastery in two or more of the following areas: NIST RMF, privacy frameworks (GDPR/CCPA), or system development lifecycle (SDLC).
• Proficiency with Splunk and DLP tools.
• Significant experience in aerospace, ground data systems, or cloud-based mission environments.
• Familiarity with Nessus and GR&C platforms (e.g., RSA Archer).
• Must be a US Citizen.

Responsibilities

• Strategy & Policy: Develop and maintain JPL’s cybersecurity requirements framework and policies to support mission-critical functions.
• Privacy & Data Protection: Provide oversight for sensitive data in support of JPL’s designated Privacy Manager and CUI Liaison; guide strategies for Data Loss Prevention (DLP), encryption, and "Privacy by Design."
• Risk Management: Conduct comprehensive risk assessments across information and operational technology (IT/OT) systems, supply chains, acquisitions, and external subcontracts.
• Compliance & Frameworks: Ensure institutional alignment with standards such as NIST 800-53, GDPR/CCPA, and CMMC; manage data mapping, classification, and ethical data usage.
• Cross-Functional Leadership: Translate complex regulatory requirements into technical architectures by collaborating with legal, information technology, and mission leads.
• Incident & Audit Support: Lead investigations into data breaches/disclosures and provide subject matter expertise for internal and external audits.

Skills

NIST RMF

Privacy frameworks (GDPR/CCPA)

SDLC

Splunk

DLP tools

Aerospace experience

Nessus

Education

Bachelor's degree in Cybersecurity, CS, or IT

Master's degree in Cybersecurity or related field

PhD in Cybersecurity or related field

Tools

RSA Archer

Other GR&C tools

Job description

New ideas are all around us, but only a few will change the world. That’s our focus at JPL. We ask the biggest questions, then search the universe for answers—literally. We build upon ideas that have guided generations, then share our discoveries to inspire generations to come. Your mission—your opportunity—is to seek out the answers that bring us one step closer. If you’re driven to discover, create, and inspire something that lasts a lifetime and beyond, you’re ready for JPL.

Located in Pasadena, California, JPL has a campus-like environment situated on 177 acres in the foothills of the San Gabriel Mountains and offers a work environment unlike any other: we inspire passion, foster innovation, build collaboration, and reward excellence.

As a senior leader within JPL’s Governance, Risk, and Compliance (GR&C) team, you will develop and maintain the cybersecurity requirements framework for JPL’s missions and business operations. You will support the JPL Privacy Manager and Controlled Unclassified Information (CUI) Liaison, oversee the lifecycle of sensitive data and ensure alignment with NASA, federal, and international regulations.

Key Responsibilities

• Strategy & Policy: Develop and maintain JPL’s cybersecurity requirements framework and policies to support mission-critical functions.
• Privacy & Data Protection: Provide oversight for sensitive data in support of JPL’s designated Privacy Manager and CUI Liaison; guide strategies for Data Loss Prevention (DLP), encryption, and "Privacy by Design."
• Risk Management: Conduct comprehensive risk assessments across information and operational technology (IT/OT) systems, supply chains, acquisitions, and external subcontracts.
• Compliance & Frameworks: Ensure institutional alignment with standards such as NIST 800-53, GDPR/CCPA, and CMMC; manage data mapping, classification, and ethical data usage.
• Cross-Functional Leadership: Translate complex regulatory requirements into technical architectures by collaborating with legal, information technology, and mission leads.
• Incident & Audit Support: Lead investigations into data breaches/disclosures and provide subject matter expertise for internal and external audits.

Required Qualifications

• Typically requires a bachelor's degree in Cybersecurity, Computer Science, Information Technology, or similar discipline with a minimum of 9 years of cybersecurity experience; master's degree in similar discipline with a minimum of 7 years of cybersecurity experience; or PhD in similar disciplines with a minimum of 5 years cybersecurity experience.
• Mastery in two or more of the following areas: NIST RMF, privacy frameworks (GDPR/CCPA), or system development lifecycle (SDLC).
• Proficiency with Splunk and DLP tools.
• Significant experience in aerospace, ground data systems, or cloud-based mission environments.
• Familiarity with Nessus and GR&C platforms (e.g., RSA Archer).
• Must be a US Citizen.

Preferred Qualifications

• Current CISSP, CIPP/US (Certified Information Privacy Professional), CISM, or CGEIT desired.

JPL has a catalog of benefits and perks that span from the traditional to the unique. This includes a variety of health, dental, vision, wellbeing, and retirement plans, paid time off, learning, rideshare, childcare, flexible schedule, parental leave and many more. Our focus is on work-life balance, and living healthy, fulfilling lives as we Dare Mighty Things Together. For benefits eligible positions, benefits are effective the first day of the month coincident with or immediately following the employee’s start date.

The hiring range displayed below is specifically for those who will work in or reside in the location listed. In extending an offer, Jet Propulsion Laboratory considers factors including, but not limited to, the candidate’s job related skills, experience, knowledge, and relevant education/training.

The typical full time equivalent annual hiring range for this job in Pasadena, California.

$159,952 - $197,184

JPL is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, citizenship, ancestry, age, marital status, physical or mental disability, medical condition, genetic information, pregnancy or perceived pregnancy, gender, gender identity, gender expression, sexual orientation, protected military or veteran status or any other characteristic or condition protected by Federal, state or local law.

In addition, JPL is a VEVRAA Federal Contractor.

EEO is the Law.

EEO is the Law Supplement

Pay Transparency Nondiscrimination Provision

The Jet Propulsion Laboratory is a federal facility. Due to rules imposed by NASA, JPL will not accept applications from citizens of designated countries or those born in a designated country unless they are U.S. Citizens, Legal Permanent Residents of the U.S or have other protected status under 8 U.S.C. 1324b(a)(3). The Designated Countries List is available here.