Information Assurance Lead - Governance, Risk, Compliance

Axiom Space; Texas; Presencial; USD 180.000 - 230.000; Jornada completa

Descripción de la vacante

Axiom Space is seeking a bold Information Assurance Lead to shape and govern security across mission-critical systems. You will drive risk-based strategy, lead audits, and ensure compliance with NIST 800-53/171, CMMC, and ITAR/export controls to safeguard data and assets in a complex environment.

Collaborate with Engineering, Legal, and Program teams to embed robust security controls into the SDLC, map threats with MITRE ATT&CK, and spearhead security automation and continuous monitoring for

Formación

• Bachelor's degree in Information Security or related field, or equivalent practical experience.
• 8+ years in information security, with 3+ years in governance, risk, or audit.
• Certifications such as CISSP, CISM, CISA or similar preferred.
• Strong knowledge of NIST SP 800-53/171 and CMMC.

Responsabilidades

• Strategic Oversight: Lead the IA roadmap aligning with risk appetite and threat landscape.
• Audit Leadership: Primary contact for security audits and certifications (NIST, CMMC, ISO 27001).
• Technical Risk Management: Oversee security assessments and threat modeling using MITRE ATT&CK.
• Cross-Functional Collaboration: Partner with Engineering, Legal, and Program teams to embed security controls.
• Third-Party Risk Management: Define technical security baselines for suppliers and manage audits.
• Process Innovation: Drive automation via SIEM, GRC to enable continuous monitoring and MITRE mapping.
• Executive Reporting: Translate risks into business insights for leadership and regulatory changes.
• Agile Project Management: Apply agile methods across the project lifecycle.

Conocimientos

Information Assurance

Security audits

Governance

Threat modeling

MITRE ATT&CK

Educación

Bachelor's degree in Information Security or related field

8+ years experience in information assurance / cybersecurity

CISSP

CISM

CISA

GSNA

CCA

Descripción del empleo

Axiom Space is a human space exploration company, building era-defining space infrastructure and delivering technology-driven solutions that will empower civilization to transcend Earth. Beginning with Axiom Station, successor to the International Space Station, the company is pioneering a next-generation orbital settlement that will foster groundbreaking innovation and research in microgravity and drive the global space economy of tomorrow. Today, guided by the vision of leading humanity's expansion off planet, Axiom Space is the principal provider of commercial human spaceflight services and developer of advanced spacesuits for the Moon and beyond. For more information about Axiom Space, visit www.axiomspace.com .

Axiom Space fosters a work environment inclusive of all perspectives. We are the pioneers of commercial space, leading the transformation of low-Earth orbit into a global space marketplace. Our mission-driven team is seeking a bold and dynamic Information Assurance Lead who is fueled by high accountability, execution horsepower, and driven to understand our world, science/technology, and life itself, for the benefit of all on Earth and beyond.

POSITION SUMMARY

Since Axiom Space is a very complex work environment, we are looking for a resilient, high-energy Information Assurance Lead. The Information Assurance (IA) Lead provides the strategic direction and technical oversight necessary to ensure Axiom Space systems and processes meet rigorous security, regulatory, and compliance obligations. This role bridges the gap between high-level governance and technical execution through a threat-informed defense strategy. You will lead the effort to proactively safeguard digital assets, govern security standards, and ensure the integrity of data across our mission-critical infrastructure, including compliance with NIST 800-53/171, CMMC, and ITAR/Export Control regulations.

KEY DUTIES & RESPONSIBILITIES

• Strategic Oversight: Lead the design and implementation of the Information Assurance roadmap, ensuring all internal and customer-facing systems align with the organizational risk appetite and modern threat landscapes.
• Audit Leadership: Function as the primary point of contact and lead for all security audits and certifications (NIST, CMMC, ISO 27001).
• Technical Risk Management: Oversee technical security assessments and threat modeling for complex networks. Utilize frameworks like MITRE ATT&CK to model adversary tactics, techniques, and procedures (TTPs), identify deviations from policy and authorize remediation strategies based on recognized countermeasures.
• Cross-Functional Collaboration: Partner with Engineering, Legal, and Program stakeholders to integrate robust security controls and defensive mitigations into the system development life cycle (SDLC).
• Third-Party Risk Management: Lead the integration of cybersecurity requirements into the procurement lifecycle; partner with Safety and Mission Assurance to define technical security baselines for suppliers and manage the end-to-end audit process to ensure compliance with NIST 800-53/171 and CMMC standards.
• Process Innovation: Drive automation in the compliance space by integrating security tooling (SIEM, GRC platforms, etc.) to create a continuous monitoring environment, mapping alerts, and telemetry to MITRE frameworks to ensure comprehensive defensive coverage.
• Executive Reporting: Translate complex security risks into business contexts for leadership, providing actionable insights on emerging adversary trends, defensive readiness, and regulatory changes.
• Agile Project Management: Implement and maintain agile project management methodologies throughout the project lifecycle.
• Performs other duties as assigned.

QUALIFICATIONS:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Education & Experience

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, or a related discipline; or equivalent practical experience, defined as 8+ years of progressively responsible experience in Information Assurance, Cybersecurity, Risk Management, or IT Audit.
• Minimum of 8+ years in technical cybersecurity roles, including at least 3 years with a primary focus on cybersecurity compliance, governance, risk, or audit functions.
• Certifications: Relevant industry certifications strongly preferred, such as CISSP, CISM, CISA, GSNA, CCA, or comparable credentials demonstrating expertise in security leadership, governance, and assurance.
• Technical Depth: Demonstrated expert-level knowledge of NIST cybersecurity frameworks (e.g., SP 800-53, SP 800-171), CMMC