Associate Director, Information Systems Security

Iridium Satellite, LLC•Tysons, VA

7h•$175,000 - $228,000•Hybrid

About The Position

The Associate Director of Information Systems Security oversees and operationally implements Aireon’s information and cybersecurity programs. Reporting to the Director of IT Security and operating under the authority of Aireon’s Accountable Executive, this role owns the execution, performance, and continuous improvement of Aireon’s ATS Information Security Management System (ATS-ISMS), as defined in the ATS-ISMM, and ensures compliance with EASA Part-IS. The position serves as Aireon’s operational information security focal point across Engineering and Operations, translating executive security objectives into effective practices that protect systems essential to global aviation safety. The role manages the personnel and capabilities responsible for ATS-ISMS activities, leads security risk management and incident response, oversees regulatory and supplier security matters, and supports secure software development. It develops executive-level security metrics and reporting, drives continuous improvement through audits and post-incident reviews, and represents Aireon on information security matters with relevant industry bodies. The position primarily works in an office setting and requires working in an Iridium office at least four days per week. Applicants must be U.S. citizens.

Requirements

Bachelor’s degree in information technology, cybersecurity, or a related discipline.
CISSP, CISM, or an equivalent professional certification.
At least 12 years of progressive experience in information security.
At least 3 years in a security leadership role managing people and security programs within critical infrastructure or high-availability operational environments.
Demonstrated experience operating or overseeing an ISMS aligned with EASA Part-IS, NIST 800-53, NIST 800-171, and/or ISO/IEC 27001.
Experience leading CSIRT/CERT incident response operations through the full incident lifecycle.
Strong knowledge of risk management frameworks and experience conducting formal risk assessments, developing treatment plans, and managing residual risk.
Experience managing third-party or supplier security programs, including vendor risk assessments and contractual security controls.
Excellent communication skills, including the ability to explain complex security concepts to non-technical executives and represent an organization externally.
Experience with audits and assessments, identifying vulnerabilities, managing findings, and demonstrating regulatory compliance.
Ability to work in an office at least four days per week.
U.S. citizenship.

Nice To Haves

Familiarity with aviation industry security requirements and regulatory bodies such as EASA, ICAO, and CANSO.
Experience in an Air Traffic Services (ATS) or aviation operational technology environment.
Familiarity with EASA Part-IS requirements and the ATS-ISMM governance framework.
Experience implementing zero trust architecture in a complex, distributed network environment.
Knowledge of safety management systems (SMS) and the intersection of safety and security risk.
Experience engaging with national or international regulatory authorities on security compliance.
Advanced qualifications such as CRISC, CGEIT, or SABSA.

Responsibilities

Own and operate Aireon’s ATS-ISMS, maintaining policies, processes, and controls in compliance with EASA Part-IS.
Manage personnel responsible for ATS-ISMS activities, including staffing, competency management, training, and performance oversight.
Lead workforce planning and capability development for the security function.
Lead information security risk management, including structured risk assessments, Risk Treatment Plans, and residual risk acceptance in coordination with the CISO and Accountable Manager.
Direct the Cyber Security Incident Response Team through detection, triage, containment, eradication, recovery, and lessons learned.
Manage responses to findings from EASA and other competent authorities, driving corrective action plans to closure.
Oversee external information security reporting and ensure timely, accurate notifications under IS.I.OR.230.
Oversee third-party and supplier security within the ATS-ISMS, including risk assessments and ongoing oversight.
Coordinate personnel security requirements, including screening, competence management, and security awareness.
Support secure software development practices by embedding security requirements and controls across engineering and operations teams.
Develop security metrics and executive reporting for the VP of Engineering & Operations and senior leadership.
Drive continuous ATS-ISMS improvement through internal audits, post-incident reviews, and systemic remediation.
Represent Aireon in information security matters with CANSO, ICAO, EASA, and other industry bodies, contributing to policy and standards discussions as appropriate.