Associate Director, Information Systems Security

Iridium Satellite•McLean, VA

6d•Hybrid

About The Position

The Associate Director of Information Systems Security oversees the operational implementation of Aireon’s information and cyber security programs. Reporting to the Director of IT Security and operating under the authority of Aireon’s Accountable Executive, this role owns the execution, performance, and continuous improvement of Aireon’s ATS Information Security Management System (ATS-ISMS), as defined in the ATS-ISMM, and ensures compliance with EASA Part-IS. The role serves as Aireon’s operational information security focal point across Engineering and Operations, translating executive security objectives into practical, measurable practices that protect the confidentiality, integrity, and availability of systems essential to global aviation safety. This position is primarily office-based and largely sedentary, with most work performed using a computer and basic office equipment. Under Iridium’s Hybrid Work Policy, employees are expected to work in an Iridium office at least four days per week. The position requires U.S. citizenship. The listed base pay range is $175,000–$228,000 USD. Compensation may also include company stock and an annual bonus. Benefits include medical, dental, and vision insurance, 401(k) retirement plan options, paid time off, paid holidays, paid parental leave, and other discounts and perks.

Requirements

Bachelor’s degree in information technology, cybersecurity, or a related discipline.
Professional certification such as CISSP, CISM, or equivalent.
12 or more years of progressive information security experience, including at least 3 years in a security leadership role managing people and security programs in critical infrastructure or high-availability operational environments.
Demonstrated experience operating or overseeing an ISMS aligned with EASA Part-IS, NIST 800-53, NIST 800-171, and/or ISO/IEC 27001.
Experience leading CSIRT/CERT incident response operations through the full incident lifecycle, from detection through lessons learned.
Strong knowledge of risk management frameworks and experience conducting formal risk assessments, developing treatment plans, and managing residual risk.
Experience managing third-party or supplier security programs, including vendor risk assessments and contractual security controls.
Excellent communication skills, including the ability to explain complex security concepts to non-technical executive audiences and represent the organization externally.
Experience with audit and assessment processes, identifying vulnerabilities, managing findings, and demonstrating regulatory compliance.
Able to work in the office at least four days per week.
Must be a U.S. citizen.

Nice To Haves

Familiarity with aviation industry security requirements and regulatory bodies, including EASA, ICAO, and CANSO.
Experience in an Air Traffic Services (ATS) or aviation operational technology environment.
Familiarity with EASA Part-IS requirements and the ATS-ISMM governance framework.
Experience implementing zero trust architecture in a complex, distributed network environment.
Knowledge of safety management systems (SMS) and the intersection of safety and security risk.
Experience engaging with national or international regulatory authorities on security compliance.
Advanced qualifications such as CRISC, CGEIT, or SABSA.

Responsibilities

Own and operate Aireon’s ATS-ISMS, ensuring its policies, processes, and controls remain compliant with EASA Part-IS.
Manage personnel responsible for ATS-ISMS activities, including staffing, competency management, training, and performance oversight.
Lead workforce planning and capability development for the security function.
Lead information security risk management, including risk assessments, Risk Treatment Plans, and residual risk acceptance in coordination with the CISO and Accountable Manager.
Direct the Cyber Security Incident Response Team across incident detection, triage, containment, eradication, recovery, and lessons learned.
Manage responses to findings from competent authorities, driving corrective action plans to timely closure.
Oversee external information security reporting and ensure timely, accurate notifications to relevant authorities and stakeholders under IS.I.OR.230.
Oversee third-party and supplier security within the ATS-ISMS, including security requirements, risk assessments, and ongoing oversight.
Coordinate personnel security requirements, including screening, competence management, and security awareness.
Support secure software development lifecycle practices by ensuring security requirements and controls are embedded across engineering and operations teams.
Develop and maintain security metrics and executive-level reporting for the VP of Engineering & Operations and senior leadership.
Drive ATS-ISMS continuous improvement through internal audits, post-incident reviews, and systemic remediation of findings.
Represent Aireon in information security matters with industry bodies such as CANSO, ICAO, and EASA, contributing to policy and standards discussions as appropriate.