Information Assurance Lead — GRC & Compliance

Axiom Space; Texas; On-site; USD 180,000 - 230,000; Full time

Job summary

Axiom Space is seeking a bold Information Assurance Lead to shape and govern security across mission-critical systems. You will drive risk-based strategy, lead audits, and ensure compliance with NIST 800-53/171, CMMC, and ITAR/export controls to safeguard data and assets in a complex environment.

Collaborate with Engineering, Legal, and Program teams to embed robust security controls into the SDLC, map threats with MITRE ATT&CK, and spearhead security automation and continuous monitoring for

Qualifications

• Bachelor's degree in Information Security or related field, or equivalent practical experience.
• 8+ years in information security, with 3+ years in governance, risk, or audit.
• Certifications such as CISSP, CISM, CISA or similar preferred.
• Strong knowledge of NIST SP 800-53/171 and CMMC.

Responsibilities

• Strategic Oversight: Lead the IA roadmap aligning with risk appetite and threat landscape.
• Audit Leadership: Primary contact for security audits and certifications (NIST, CMMC, ISO 27001).
• Technical Risk Management: Oversee security assessments and threat modeling using MITRE ATT&CK.
• Cross-Functional Collaboration: Partner with Engineering, Legal, and Program teams to embed security controls.
• Third-Party Risk Management: Define technical security baselines for suppliers and manage audits.
• Process Innovation: Drive automation via SIEM, GRC to enable continuous monitoring and MITRE mapping.
• Executive Reporting: Translate risks into business insights for leadership and regulatory changes.
• Agile Project Management: Apply agile methods across the project lifecycle.

Skills

Information Assurance

Security audits

Governance

Threat modeling

MITRE ATT&CK

Education

Bachelor's degree in Information Security or related field

8+ years experience in information assurance / cybersecurity

CISSP

CISM

CISA

GSNA

CCA

Job description

Axiom Space is seeking a bold Information Assurance Lead to shape and govern security across mission-critical systems. You will drive risk-based strategy, lead audits, and ensure compliance with NIST 800-53/171, CMMC, and ITAR/export controls to safeguard data and assets in a complex environment.

Collaborate with Engineering, Legal, and Program teams to embed robust security controls into the SDLC, map threats with MITRE ATT&CK, and spearhead security automation and continuous monitoring for