Information Systems Security Manager (TS/SCI)

K2Spacecorporation; Los Angeles (CA); On-site; USD 160,000 - 200,000; Full time

Benefits offered by this job

Equity in the company

Comprehensive benefits package

Paid parental leave

Job summary

K2Spacecorporation is hiring an Information Systems Security Manager (ISSM) in Los Angeles. The ISSM will ensure compliance with cybersecurity regulations while managing security policies and risk assessments.

Ideal candidates should possess a Master’s degree in a relevant field or a Bachelor’s with additional experience, along with certifications such as CISSP and strong communication skills. A comprehensive benefits package is provided.

Qualifications

• Master’s degree with 4+ years or Bachelor’s degree with 6+ years of experience.
• 5+ years in information assurance for national security systems.
• Hands-on experience with major cybersecurity frameworks.

Responsibilities

• Build and manage a team of Information System Security Officers.
• Develop and maintain an Information Systems Security Program.
• Conduct risk assessments and security audits.

Skills

Cybersecurity best practices

Risk management

NIST compliance

Technical writing

Network security

System security architecture

Communication skills

Education

Master’s degree in cybersecurity or related field

Bachelor’s degree in cybersecurity or related field

Tools

Tenable Nessus

SCAP

DISA STIG Viewer

Vulnerability compliance tools

Job description

The Role

As an Information Systems Security Manager (ISSM) at K2 Space you will oversee and maintain compliance with cybersecurity regulations and best practices for our space systems and infrastructure. The ISSM will be responsible for developing, implementing, and managing security policies, risk assessments, and security controls to protect classified and unclassified information systems. Our ideal candidate is self‑motivated and able to coordinate with national security stakeholders to meet their unique requirements for safeguarding classified information across the spectrum of classification levels. The selected candidate will provide Cyber Security technical leadership as the ISSM, manage internal/external customers’ expectations for security architecture, and provide expertise as the Subject Matter Expert on ongoing projects by executing on program performance, delivery, and milestone completion including Assessment & Authorization (A&A) events. The ISSM will also provide Cyber Security input and support for the implementation and testing of secure operating systems/networks, DevSecOps, and cloud solutions. A fast‑paced startup environment requires the ISSM to quickly adapt and implement solutions in a dynamic workplace.

Responsibilities

• Build and manage a team of highly capable Information System Security Officers.
• Develop and maintain a formal Information Systems Security Program.
• Ensure compliance with NIST, RMF, and other relevant cybersecurity frameworks.
• Develop, implement, and enforce information security policies and procedures.
• Conduct risk assessments, vulnerability analyses, and security audits.
• Manage security authorization packages and maintain system accreditations.
• Institute and implement a Configuration Control Board (CCB) charter.
• Ensure that all ISSOs, network administrators, System Administrators, and other cyber security personnel receive the necessary technical and annual training to carry out their duties.
• Coordinate with CPSO on approval of external information systems (e.g., guest systems, interconnected system with another organization).
• Work closely with IT, engineering, program management, and government agencies to ensure secure operations.
• Provide security training and awareness programs for employees.
• Investigate and respond to security incidents and implement corrective actions.

Qualifications

• Master’s degree in cybersecurity, IT, or a related field with at least 4 years’ experience, or Bachelor’s degree in cybersecurity, IT, or a related field with at least 6 years’ experience.
• 5+ years working in information assurance for national security systems.
• Hands‑on experience with NIST SP 800‑53, DoDI 8510.01, CNSSI 1253, JSIG/ICD 503, and STIG/SRG application and other DoD cybersecurity policies.
• Proficiency in vulnerability and compliance tools: Tenable Nessus, SCAP, DISA STIG Viewer, log/monitoring, and familiarity with patch management.
• Experience developing and maintaining SSP, SAR/SAP, POA&M, and RMF evidence with strong technical writing skills.
• Knowledge of network security, Windows/Linux hardening, virtualization, endpoint protection, identity & access management, encryption/key management, and secure configuration baselines.
• Strong understanding of system security architecture and risk management.
• Experience as an ISSM, ISSO, or ISSE.
• Current DoD 8570/8140 Tier III certification or higher (CISSP, CISM, etc.).
• Active TS/SCI Clearance, and willingness to submit to a CI polygraph.
• Exceptional written and verbal communication skills.

Nice to Have

• Additional cybersecurity certifications (CAP, CEH, GSEC, GSLC).
• Experience supporting Defense and Intelligence Community programs.
• Familiarity with secure cloud and hybrid environments (e.g., DoD Cloud SRG, IL2–IL6, GovCloud, IC ITE).
• Experience in setting up new secure networks at a commercial organization (SCI or SAP).
• Experience obtaining Authority to Operate (ATO) of an operational aerospace system (satellite, aircraft, etc.).

Compensation and Benefits

• Base salary range for this role is $160,000 - $200,000 + equity in the company.
• Salary will be based on several factors, including, but not limited to: knowledge and skills, education, and experience level.
• Comprehensive benefits package including paid time off, medical/dental/vision coverage, life insurance, paid parental leave, and many other perks.

Export Compliance

As defined in the ITAR, “U.S. Persons” include U.S. citizens, lawful permanent residents (Green Card holders), and certain protected individuals (e.g., refugees/asylees, American Samoans). Please consult with a knowledgeable advisor if you are unsure whether you are a “U.S. Person.”

The person hired for this role will have access to information and items controlled by U.S. export control regulations, including the export control regulations outlined in the International Traffic in Arms Regulation (ITAR). The person hired for this role must therefore either be a “U.S. person” as defined by 22 C.F.R. § 120.15 or otherwise eligible for a federally issued export control license.

Equal Opportunity

K2 Space is an Equal Opportunity Employer; employment with K2 Space is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity or marital status or any other legally protected status.

If you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know.