Enterprise IT Lead / Space Programs
About The Position
The Enterprise IT Lead is the senior leader responsible for establishing, implementing, and sustaining program-wide cybersecurity governance across multiple security boundaries. The role provides strategic direction and authoritative oversight for cybersecurity policy, risk management, compliance, and enterprise standardization, ensuring practices are consistent, repeatable, efficient, and aligned with Agency expectations while accommodating operational technology environments. It centralizes and elevates cybersecurity governance, reduces duplication, and improves consistency without replacing system-level authority or mission-specific decision-making. The role develops the program’s cybersecurity strategy and governance framework; establishes standardized policies, plans, and procedures; leads governance boards and compliance forums; and coordinates adoption of approved security standards with system-level leaders. It conducts enterprise risk reviews, recommends risk acceptance or mitigation, approves security exceptions before escalation to the customer, directs corrective actions, and evaluates cybersecurity impacts across major projects. The Enterprise IT Lead reports cybersecurity posture, trends, and risks to program leadership; guides cybersecurity training and workforce development; and promotes cross-boundary collaboration. The role reviews and validates program-level policies, plans, procedures, POA&Ms, and risk-based decisions before submission, tracks implementation of standardized governance, and coordinates board participants. It also provides oversight and coordination for cybersecurity activities while preserving local system ownership and mission decision-making.
Requirements
- Degree in Computer Science, Information Technology, or a related technical discipline.
- 12 years of experience with a BS/BA, 10 years with an MS/MA, or 7 years with a Ph.D.
- Experience leading cybersecurity programs, governance initiatives, or enterprise security frameworks for NASA.
- Active Secret security clearance.
- U.S. citizenship and proof of citizenship.
- Ability to maintain access to a government worksite.
- Demonstrated ability to develop cybersecurity policies, standards, and procedures.
- Experience with cybersecurity risk management and security authorization processes.
- Ability to collaborate effectively across diverse technical, operational, and management teams.
Nice To Haves
- Experience supporting or managing cybersecurity activities within operational technology (OT) or hybrid IT/OT environments.
Responsibilities
- Develop and oversee the program’s enterprise cybersecurity strategy and governance framework.
- Establish standardized cybersecurity policies, plans, and procedures applicable across all systems and boundaries.
- Lead cybersecurity governance boards, compliance forums, and cross-functional decision-making bodies.
- Ensure program-wide adoption of approved security standards and coordinate implementation with system-level leaders.
- Conduct enterprise-level cybersecurity risk reviews and recommend risk acceptance or mitigation.
- Approve security exception requests before escalation to the customer.
- Direct corrective actions when cybersecurity or architectural requirements are not met.
- Evaluate cybersecurity impacts across major projects and ensure alignment with program strategy.
- Report cybersecurity posture, trends, and risks to program leadership.
- Sponsor and guide cybersecurity training, workforce development, and cross-boundary collaboration.
- Promote consistent understanding and application of cybersecurity requirements among stakeholders.
- Review and validate program-level policies, plans, procedures, POA&Ms, and risk-based decisions before submission to documentation control or the customer.
- Track and report progress on implementation of standardized cybersecurity governance.
- Coordinate permanent and ad hoc governance board participants, including ISMs, ISSOs, ISSEs, system administrators, network engineers, project managers, and subject-matter experts.
- Provide oversight, direction, and coordination for cybersecurity activities while preserving local system ownership and mission decision-making.
- Collaborate with technical and operational personnel to ensure alignment with enterprise standards.
- Institutionalize repeatable cybersecurity practices to improve consistency and reduce redundant work across the program.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
