Cybersecurity Requirements and Data Protection Lead

Jet Propulsion Laboratory; United States; On-site; USD 160,000 - 197,000; Full time

Job summary

Jet Propulsion Laboratory in Pasadena, CA seeks a senior cybersecurity leader to develop and maintain the cybersecurity requirements framework for missions and operations. You will oversee sensitive data, coordinate with the Privacy Manager and CUI Liaison, and ensure alignment with NIST, GDPR/CCPA, and CMMC.

The role requires leadership across legal, IT, and mission teams, strong risk management, and extensive experience in aerospace or cloud environments. U.S.

Qualifications

• Bachelor's degree in Cybersecurity, CS, or IT with at least 9 years of cybersecurity experience.
• Master's degree in a related field with at least 7 years of cybersecurity experience.
• PhD in a related discipline with at least 5 years of cybersecurity experience.
• Expertise in two or more areas: NIST RMF, GDPR/CCPA, or SDLC.
• Proficiency with Splunk and DLP tools.
• Significant experience in aerospace, ground data systems, or cloud-based mission environments.
• U.S. Citizenship required.

Responsibilities

• Develop and maintain JPL’s cybersecurity requirements framework and policies to support mission-critical functions.
• Provide oversight for sensitive data and guide strategies for Data Loss Prevention (DLP), encryption, and Privacy by Design.
• Conduct comprehensive risk assessments across IT/OT systems, supply chains, acquisitions, and external subcontracts.
• Ensure institutional alignment with standards such as NIST 800-53, GDPR/CCPA, and CMMC; manage data mapping, classification, and ethical data usage.
• Translate complex regulatory requirements into technical architectures by collaborating with legal, IT, and mission leads.
• Lead investigations into data breaches/disclosures and provide SME support for audits.

Skills

NIST RMF

Privacy frameworks

SDLC

Splunk

DLP tools

Nessus

GR&C platforms (RSA Archer)

Education

Bachelor's degree in Cybersecurity/CS/IT

Master's degree in related discipline

PhD in related discipline

Tools

Splunk

DLP tools

Nessus

RSA Archer

Job description

Job Details

New ideas are all around us, but only a few will change the world. That’s our focus at JPL. We ask the biggest questions, then search the universe for answers—literally. We build upon ideas that have guided generations, then share our discoveries to inspire generations to come. Your mission—your opportunity—is to seek out the answers that bring us one step closer. If you’re driven to discover, create, and inspire something that lasts a lifetime and beyond, you’re ready for JPL.

Located in Pasadena, California, JPL has a campus-like environment situated on 177 acres in the foothills of the San Gabriel Mountains and offers a work environment unlike any other: we inspire passion, foster innovation, build collaboration, and reward excellence.

As a senior leader within JPL’s Governance, Risk, and Compliance (GR&C) team, you will develop and maintain the cybersecurity requirements framework for JPL’s missions and business operations. You will support the JPL Privacy Manager and Controlled Unclassified Information (CUI) Liaison, oversee the lifecycle of sensitive data and ensure alignment with NASA, federal, and international regulations.

Key Responsibilities

• Strategy & Policy: Develop and maintain JPL’s cybersecurity requirements framework and policies to support mission-critical functions.
• Privacy & Data Protection: Provide oversight for sensitive data in support of JPL’s designated Privacy Manager and CUI Liaison; guide strategies for Data Loss Prevention (DLP), encryption, and "Privacy by Design."
• Risk Management: Conduct comprehensive risk assessments across information and operational technology (IT/OT) systems, supply chains, acquisitions, and external subcontracts.
• Compliance & Frameworks: Ensure institutional alignment with standards such as NIST 800-53, GDPR/CCPA, and CMMC; manage data mapping, classification, and ethical data usage.
• Cross-Functional Leadership: Translate complex regulatory requirements into technical architectures by collaborating with legal, information technology, and mission leads.
• Incident & Audit Support: Lead investigations into data breaches/disclosures and provide subject matter expertise for internal and external audits.

Required Qualifications

• Typically requires a bachelor's degree in Cybersecurity, Computer Science, Information Technology, or similar discipline with a minimum of 9 years of cybersecurity experience;
• master's degree in similar discipline with a minimum of 7 years of cybersecurity experience;
• or PhD in similar disciplines with a minimum of 5 years cybersecurity experience.
• Mastery in two or more of the following areas: NIST RMF, privacy frameworks (GDPR/CCPA), or system development lifecycle (SDLC).
• Proficiency with Splunk and DLP tools.
• Significant experience in aerospace, ground data systems, or cloud-based mission environments.
• Familiarity with Nessus and GR&C platforms (e.g., RSA Archer).
• Must be a US Citizen.

Preferred Qualifications

• Current CISSP, CIPP/US (Certified Information Privacy Professional), CISM, or CGEIT desired.

JPL has a catalog of benefits and perks that span from the traditional to the unique. This includes a variety of health, dental, vision, wellbeing, and retirement plans, paid time off, learning, rideshare, childcare, flexible schedule, parental leave and many more.

For benefits eligible positions, benefits are effective the first day of the month coincident with or immediately following the employee’s start date.

In extending an offer, Jet Propulsion Laboratory considers factors including, but not limited to, the candidate’s job related skills, experience, knowledge, and relevant education/training.

Salary and Hiring Range

The typical full time equivalent annual hiring range for this job in Pasadena, California. $159,952 - $197,184

JPL is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, citizenship, ancestry, age, marital status, physical or mental disability, medical condition, genetic information, pregnancy or perceived pregnancy, gender, gender identity, gender expression, sexual orientation, protected military or veteran status or any other characteristic or condition protected by Federal, state or local law.

In addition, JPL is a VEVRAA Federal Contractor. EEO is the Law. EEO is the Law Supplement Pay Transparency Nondiscrimination Provision.

The Designated Countries List is available here.

Formed in 1936, the NASA Jet Propulsion Laboratory is a federally funded research and development center managed for NASA by the California Institute of Technology (Caltech.) JPL joined NASA as an FFRDC when the agency was founded in 1958. JPL helped open the Space Age by developing America’s first Earth-orbiting science satellite, creating the first successful interplanetary spacecraft, and sending robotic missions to the solar system. Today JPL continues its world-leading innovation, implementing programs in planetary exploration, Earth science, space-based astronomy and technology development while applying its capabilities to technical and scientific problems of national significance. Above all, we are explorers. At JPL we promote collaboration, innovation, integrity, and excellence in distinct academic areas. We turn ideas for science investigation into the reality of groundbreaking space missions, partnering with our strategic business teams to guide JPL into the future.