Senior Data Center Cyber Assurance Lead

SpaceX; Memphis (TN); On-site; USD 120,000 - 160,000; Full time

Job summary

SpaceX is seeking a Senior Cyber Assurance Analyst for our data centers. You will own and scale cyber assurance across ISO 27001, ISO 42001, and SOC 2, driving evidence collection, remediation, and audit readiness across a multi-site portfolio.

You will partner with engineering and operations teams to implement controls in production environments, while translating framework requirements into practical actions and reporting to leadership.

Qualifications

• 5+ years in cybersecurity compliance, audits or security roles.
• 5+ years in control testing, policy development, audits, or risk management.
• Strong ability to translate frameworks (ISO27001/ISO42001/SOC 2) into actionable controls.

Responsibilities

• Own and execute data center ISO27001, ISO42001 and SOC 2 compliance programs (Type I/II).
• Build and maintain audit-ready evidence packages for security controls.
• Collaborate with engineers to ensure controls operate as designed in production.
• Coordinate internal and external audits; serve as primary liaison to auditors.
• Perform risk assessments of data center systems and drive remediation with owners.
• Develop and improve information security policies, standards and procedures.
• Improve evidence pipelines and tooling to scale audit readiness across sites.
• Stay updated on evolving ISO SOC expectations for data centers and AI environments.
• Mentor teammates and contribute to their development.

Skills

Cybersecurity compliance

Controls testing

Audit coordination

Security risk management

Education

Leadership certifications (CISA/CISM/CISSP/CRISC) or ISO 27001 Lead Implementer/Auditor

Job description

SpaceX is seeking a Senior Cyber Assurance Analyst for our data centers. You will own and scale cyber assurance across ISO 27001, ISO 42001, and SOC 2, driving evidence collection, remediation, and audit readiness across a multi-site portfolio.

You will partner with engineering and operations teams to implement controls in production environments, while translating framework requirements into practical actions and reporting to leadership.