Information Systems Security Manager (ISSM) New San Francisco

Astranis; San Francisco (CA); On-site; USD 150,000 - 218,000; Full time

Benefits offered by this job

Equity in compensation package

Healthcare benefits

401(k) retirement plan

Flexible PTO

Free on-site meals

Job summary

Astranis is seeking an Information Systems Security Manager (ISSM) to lead RMF, information security, and assurance programs for classified and unclassified systems. You will work with government customers, leadership, and technical teams to maintain secure, compliant environments and ensure accreditation readiness.

The role requires TS clearance, 8+ years in ISSM roles, RMF expertise, and experience with eMASS, ACAS, SIEM, and STIGs across Windows and Linux.

Qualifications

• Active U.S. Government TS clearance with SCI eligibility.
• Bachelor’s degree or equivalent experience in a related field.
• 8+ years in ISSM roles on classified systems in collateral/SCIF environments.

Responsibilities

• Lead the Information System Security Program per RMF and ICDs.
• Oversee RMF lifecycle, control implementation, assessment, and authorization.
• Interface with SCAs and accrediting authorities to maintain compliance.

Skills

RMF

NISPOM

ICDs

SIEM

STIG

ACAS

leadership

Education

Bachelor's degree in a related field

Tools

ACAS

SIEM

STIG

Job description

Information Systems Security Manager (ISSM)

Astranis builds advanced satellites for high orbits, expanding humanity's reach into the solar system. Today Astranis satellites provide dedicated, secure networks to highly-sophisticated customers across the globe - large enterprises, sovereign governments, and the US military.

With five satellites on orbit and many more set to launch soon, the company is servicing a backlog of more than $1 billion of commercial contracts. Astranis is the preferred satellite communications partner for buyers with stringent requirements for uptime, data security, network visibility, and customization.

Astranis has raised over $1.2 billion from some of the world’s best investors, including Andreessen Horowitz, Baillie Gifford, Blackrock, Fidelity, Franklin Templeton, and Snowpoint, and employs a team of 500 engineers and entrepreneurs. Astranis designs, builds, and operates its satellites out of its 153,000 sq. ft. headquarters in Northern California, USA.

Information Systems Security Manager (ISSM)

The Information Systems Security Manager (ISSM) is responsible for leading the development, implementation, and oversight of Risk Management Framework (RMF), Information Security, and information assurance programs supporting classified and unclassified systems across collateral and Sensitive Compartmented Information Facility (SCIF) environments. This role ensures compliance with 32 CFR Part 117 (NISPOM) and applicable Intelligence Community Directives (ICDs), safeguarding national security information while enabling mission success.

The ISSM serves as the principal advisor on all classified information system security matters and collaborators closely with government customers, security leadership, and technical teams to maintain secure, compliant, and inspection-ready environments.

Working in coordination with the Chief Security Officer, the ISSM implements enterprise common controls and represents the organization with U.S. Government accrediting authorities, including Authorizing Officials (AOs) and Security Control Assessors (SCAs). The ISSM ensures a strong operational security posture across local area networks (LANs), wide area networks (WANs), and standalone systems through proactive risk management and continuous monitoring.

Role

Program Leadership, Compliance & RMF

• Lead and manage the Information System Security Program in accordance with NISPOM and applicable ICDs (e.g., ICD 503, ICD 705).
• Serve as principal advisor on all classified systems security matters.
• Oversee RMF lifecycle activities, including system categorization, control implementation, assessment, authorization, and continuous monitoring.
• Ensure systems meet classified processing requirements and maintain proper accreditation status.
• Develop, review, and maintain System Security Plans (SSPs), policies, procedures (SPPs), and supporting artifacts.
• Represent the organization with accrediting authorities; review and approve authorization packages.
• Interface directly with Security Control Assessors (SCAs) to demonstrate compliance during assessments.

System Security & Continuous Monitoring

• Manage continuous monitoring programs, including vulnerability assessments, POA&M tracking, and audit reviews.
• Analyze SIEM outputs and audit logs to identify anomalous or unauthorized activity.
• Conduct self-assessments and implement corrective actions to address vulnerabilities and compliance gaps.
• Maintain accurate system documentation, including SSPs, POA&Ms, and risk assessment reports.
• Ensure configuration management, patching, and system hardening in alignment with STIG requirements.

Network, Operations & Incident Response

• Oversee the cybersecurity posture of LANs, WANs, and standalone systems.
• Monitor systems to detect threats, vulnerabilities, and operational risks.
• Manage COMSEC, media control, and data spill response procedures across classified environments.
• Develop and execute incident response processes for spills, malware, and insider threat activities.
• Investigate, document, and report incidents in accordance with government requirements.
• Assess the security impact of system changes and support formal change management processes.

Inspections, Training & Governance

• Lead and support inspections, audits, and assessments conducted by DCSA and Intelligence Community stakeholders.
• Engage directly with government representatives to validate compliance with technical and policy requirements.
• Review and implement security advisories, directives, and emerging requirements.
• Deliver security education and awareness training to users, administrators, and leadership.
• Develop and enforce classified system policies, procedures, and standard operating procedures (SOPs).
• Communicate security responsibilities clearly across all organizational levels.

Requirements

• Active U.S. Government Top Secret clearance with SCI eligibility.
• Bachelor’s degree in a related field or equivalent experience.
• 8+ years of experience in ISSM roles supporting classified systems in collateral and SCIF environments.
• Demonstrated experience with eMASS and participation in DCSA assessments.
• Current CompTIA Security+ (or equivalent) certification in compliance with DoD Directive 8140.
• Strong expertise in RMF and working knowledge of NISPOM, ICD 503, ICD 705, and NIST standards.
• Experience with vulnerability scanning tools (e.g., ACAS), SIEM platforms, and STIG implementation across Windows and Linux systems.
• Proven leadership, communication, and stakeholder engagement skills.
• Preferred certifications: CISSP, CISM, or CAP.

What we offer:

All our positions offer a compensation package that includes equity and robust benefits.

Base pay is just one component of Astranis's total rewards package. Your compensation also includes a significant equity package via incentive stock options, high-quality company-subsidized healthcare, disability and life insurance, 401(k) retirement planning, flexible PTO, and free on-site catered meals.

Astranis pay ranges are informed and defined through professional-grade salary surveys and compensation data sources. The actual base salary offered to a successful candidate will additionally be influenced by a variety of factors including experience, credentials & certifications, educational attainment, skill level requirements, and the level and scope of the position.

$150,000 - $218,000 USD

U.S. Citizenship, Lawful Permanent Residency, or Refugee/Asylee Status Required

(To comply with U.S. Government space technology export regulations, applicant must be a U.S. citizen, lawful permanent resident of the United States, or other protected individual as defined by 8 U.S.C. 1324b(a)(3))

Our mission and products are built for everyone, regardless of gender, race, creed, or background. We believe in a diverse and inclusive workplace, and we invite all people to join our team and bring their unique perspectives to make us stronger.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Astranis's Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.