Information Systems Security Manager (TS/SCI)

K2 Space; Los Angeles (CA); On-site; USD 160,000 - 200,000; Full time

Benefits offered by this job

Paid time off

Medical/dental/vision coverage

Life insurance

Paid parental leave

Equity in the company

Job summary

K2 Space in Los Angeles is looking for an Information Systems Security Manager (ISSM) to oversee cybersecurity compliance for space systems. The ISSM will develop, implement, and manage security policies while coordinating with national security stakeholders.

The role requires a Master's or Bachelor's degree in cybersecurity with relevant experience. Expect comprehensive benefits, a base salary from $160k to $200k, and potential equity in a dynamic startup environment.

Qualifications

• 5+ years in information assurance for national security systems.
• Hands-on experience with cybersecurity policies and frameworks.
• Strong understanding of network security and risk management.

Responsibilities

• Manage a team of Information System Security Officers.
• Develop and maintain an Information Systems Security Program.
• Conduct risk assessments and security audits.
• Coordinate with stakeholders for security operations.

Skills

NIST SP 800-53

DoDI 8510.01

CISSP

Risk Management Framework (RMF)

Technical writing

Vulnerability tools (e.g., Tenable Nessus)

System security architecture

TS/SCI Clearance

Education

Master’s degree in cybersecurity or related field +4 years’ experience

Bachelor’s degree in cybersecurity or related field +6 years’ experience

Tools

Tenable Nessus

DISA STIG Viewer

Job description

The Role

As an Information Systems Security Manager (ISSM) at K2 Space you will oversee and maintain compliance with cybersecurity regulations and best practices for our space systems and infrastructure. The ISSM will be responsible for developing, implementing, and managing security policies, risk assessments, and security controls to protect classified and unclassified information systems.

Our ideal candidate is self‑motivated and able to coordinate with national security stakeholders to meet their unique requirements for safeguarding classified information across the spectrum of classification levels. The selected candidate will provide cyber security technical leadership as the ISSM, manage internal and external customers’ expectations for security architecture, and act as the subject‑matter expert on ongoing projects by executing program performance, delivery, and milestone completion, including Assessment & Authorization (A&A) events. Furthermore, the ISSM will provide cyber security input and support for the implementation and testing of secure operating systems, networks, DevSecOps, and cloud solutions. K2 Space is a fast‑paced startup environment, and as ISSM you must be able to quickly adapt and implement solutions in a dynamic workplace.

Responsibilities

• Build and manage a team of highly capable Information System Security Officers.
• Develop and maintain a formal Information Systems Security Program.
• Ensure compliance with NIST, RMF, and other relevant cybersecurity frameworks.
• Develop, implement, and enforce information security policies and procedures.
• Conduct risk assessments, vulnerability analyses, and security audits.
• Manage security authorization packages and maintain system accreditations.
• Institute and implement a Configuration Control Board (CCB) charter.
• Ensure that all ISSOs, network administrators, System Administrators and other cyber security personnel receive the necessary technical and annual training to carry out their duties.
• Coordinate with CPSO on approval of external information systems (e.g., guest systems, interconnected system with another organization).
• Work closely with IT, engineering, program management and government agencies to ensure secure operations.
• Provide security training and awareness programs for employees.
• Investigate and respond to security incidents and implement corrective actions.

Qualifications

• Master’s degree in cybersecurity, IT, or a related field +4 years’ experience or Bachelor’s degree in cybersecurity, IT, or a related field +6 years’ experience.
• 5+ years working in information assurance for national security systems.
• Hands‑on experience with NIST SP 800-53, DoDI 8510.01, CNSSI 1253, JSIG/ICD 503, and STIG/SRG application and other DoD cybersecurity policies.
• Proficiency in vulnerability and compliance tools: Tenable Nessus, SCAP, DISA STIG Viewer, log/monitoring, and familiarity with patch management.
• Experience developing and maintaining SSP, SAR/SAP, POA&M, and RMF evidence with strong technical writing skills.
• Knowledge of network security, Windows/Linux hardening, virtualization, endpoint protection, identity & access management, encryption/key management, and secure configuration baselines.
• Strong understanding of system security architecture and risk management.
• Experience as an ISSM, ISSO, or ISSE.
• Current DoD 8570/8140 Tier III certification or higher (CISSP, CISM, etc.).
• Active TS/SCI Clearance, and willingness to submit to a CI polygraph.
• Exceptional written and verbal communication skills.

Nice to Have

• Additional cybersecurity certifications (CAP, CEH, GSEC, GSLC).
• Experience supporting Defense and Intelligence Community programs.
• Familiarity with secure cloud and hybrid environments (e.g., DoD Cloud SRG, IL2–IL6, GovCloud, IC ITE).
• Experience in standing up new secure networks at a commercial organization (SCI or SAP).
• Experience obtaining Authority to Operate (ATO) of an operational aerospace system (satellite, aircraft, etc.).

Compensation and Benefits

• Base salary range for this role is $160,000 - $200,000 + equity in the company.
• Salary will be based on several factors, including, but not limited to: knowledge and skills, education, and experience level.
• Comprehensive benefits package including paid time off, medical/dental/vision coverage, life insurance, paid parental leave, and many other perks.

Equal Opportunity

K2 Space is an Equal Opportunity Employer; employment with K2 Space is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Export Compliance

As defined in the ITAR, “U.S. Persons” include U.S. citizens, lawful permanent residents (i.e., Green Card holders), and certain protected individuals (e.g., refugees/asylees, American Samoans). Please consult with a knowledgeable advisor if you are unsure whether you are a “U.S. Person.”

The person hired for this role will have access to information and items controlled by U.S. export control regulations, including the export control regulations outlined in the International Traffic in Arms Regulation (ITAR). The person hired for this role must therefore either be a “U.S. person” as defined by 22 C.F.R. § 120.15 or otherwise eligible for a federally issued export control license.