Enterprise IT Lead / Space Programs
About The Position
The Enterprise IT Lead is the senior leader responsible for establishing, implementing, and sustaining program-wide cybersecurity governance across multiple security boundaries. The role provides authoritative oversight and strategic direction for cybersecurity policy, risk management, compliance, and enterprise standardization, ensuring practices are consistent, repeatable, efficient, and aligned with Agency expectations while accommodating operational technology environments. It centralizes and elevates cybersecurity governance, reduces duplicated work, and improves consistency without replacing system-level authority or mission-specific decision-making. The position develops and oversees the program’s enterprise cybersecurity strategy and governance framework; establishes standardized security policies, plans, and procedures; and leads governance boards, compliance forums, and cross-functional decision-making. It reviews enterprise cybersecurity risk, recommends risk acceptance or mitigation, approves security exceptions before escalation to the customer, directs corrective actions, and evaluates cybersecurity impacts of major projects. The Enterprise IT Lead reports cybersecurity posture, trends, and risks to program leadership; guides cybersecurity training and workforce development; and promotes consistent application of cybersecurity requirements. The role reviews program-level policies, plans, procedures, POA&Ms, and risk-based decisions before submission to documentation control or the customer, tracks governance implementation, and coordinates board participants across technical and program teams. It also coordinates cybersecurity activities with technical and operational personnel while preserving local system ownership and mission decision-making.
Requirements
- Degree in Computer Science, Information Technology, or a related technical discipline.
- Required experience: 12 years with a BS/BA, 10 years with an MS/MA, or 7 years with a Ph.D.
- Experience leading cybersecurity programs, governance initiatives, or enterprise security frameworks for NASA.
- Active Secret security clearance.
- Must be a U.S. citizen and provide proof of citizenship.
- Must be able to maintain the ability to access a government worksite.
- Demonstrated ability to develop cybersecurity policies, standards, and procedures.
- Experience with cybersecurity risk management and security authorization processes.
- Ability to collaborate effectively across diverse technical, operational, and management teams.
Nice To Haves
- Experience supporting or managing cybersecurity activities within OT or hybrid IT/OT environments.
Responsibilities
- Develop and oversee the program’s enterprise cybersecurity strategy and governance framework.
- Establish standardized cybersecurity policies, plans, and procedures applicable across systems and security boundaries.
- Lead cybersecurity governance boards, compliance forums, and cross-functional decision-making bodies.
- Ensure adoption of approved security standards and coordinate implementation with system-level leaders.
- Conduct enterprise-level cybersecurity risk reviews and recommend risk acceptance or mitigation.
- Approve security exception requests before escalation to the customer.
- Direct corrective actions when cybersecurity or architectural requirements are not met.
- Evaluate cybersecurity impacts across major projects and ensure alignment with program strategy.
- Report cybersecurity posture, trends, and risks to program leadership.
- Sponsor and guide cybersecurity training, workforce development, and cross-boundary collaboration.
- Promote consistent understanding and application of cybersecurity requirements among stakeholders.
- Review and validate program-level policies, plans, procedures, POA&Ms, and risk-based decisions before submission to documentation control or the customer.
- Track and report progress on implementation of standardized cybersecurity governance.
- Coordinate permanent and ad hoc board participants, including ISMs, ISSOs, ISSEs, system administrators, network engineers, project managers, and subject-matter experts.
- Provide oversight, direction, and coordination for cybersecurity activities while preserving local system ownership and mission decision-making.
- Collaborate with technical and operational personnel to ensure alignment with enterprise standards.
- Institutionalize repeatable cybersecurity practices to improve consistency and reduce redundant work across the program.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
