Information Systems Security Manager

General Matter•Los Angeles, CA

1d•$180,000 - $260,000

About The Position

General Matter is seeking a classified cyber assurance expert to build out Governance, Risk, and Compliance (GRC) and Risk Management Framework (RMF) processes within its Software organization. The role owns and represents the company’s information systems security program, connects its requirements to the needs of internal and external parties, serves as a regulatory-compliance subject matter expert, and helps engineering teams interpret and meet applicable requirements. The position owns the RMF lifecycle for classified information systems, works with engineers to manage regulatory overhead and build security into software operations, and helps develop tools and processes for scalable security assessment, auditing, and enforcement. It also coordinates external audits and tests with government partners and contributes to a GRC tool suite used across the company’s classified systems. The role requires at least three years of experience managing cyber assurance for classified computer networks, strong engineering fundamentals, and the ability to make recommendations using first principles with partial information. The successful candidate must be able to obtain and maintain eligibility for a DoE Q-level clearance and work extended hours and weekends when necessary.

Requirements

Evidence of exceptional ability, such as prior projects, a portfolio of work, or completed products.
Strong understanding of engineering fundamentals.
Ability to perform trade studies and make clear recommendations using first principles and engineering fundamentals, including with partial information.
At least 3 years of experience managing cyber assurance for classified computer networks.
Ability to obtain and maintain eligibility for a DoE Q-level clearance.
Ability to work extended hours and weekends as necessary.

Nice To Haves

Experience operating in a NIST 800-53 environment.
Experience in a fast-paced engineering or highly technical environment, with a resourceful approach to delivering under tight timelines or budget constraints.
Experience building an approved classified space from the ground up on ambitious timelines.
Expertise with the 7-step RMF process and its relationship to modern software development.
Experience implementing 10 CFR Part 810 export-control and U.S.-person access restrictions as enforced technical controls on classified systems, in coordination with the FSO.
Experience obtaining ATOs under DoD or DOE authorization boundaries.
Expertise with COMSEC procedures and practices.
Experience writing and delivering complex software systems in a highly regulated environment.

Responsibilities

Own the RMF lifecycle to ensure regulatory compliance for General Matter classified information systems.
Ensure classified information systems remain demonstrably compliant with regulatory requirements.
Collaborate with internal engineering teams to manage regulatory overhead risk and support mission success without compromising security.
Work with software engineers to evaluate and build automated tools for security policy assessment, auditing, and enforcement at scale.
Work with government partners to plan and coordinate external audits and tests.
Help build out the GRC suite of tools used across General Matter classified information systems.
Clarify and interpret requirements to unblock engineering teams and deliver compliance with those requirements.
Build security into General Matter’s operational model as a first-order requirement at all levels of the software stack.
Represent and own General Matter’s information systems security program in relation to internal and external parties.

Benefits

For full-time hires, potential eligibility for long-term incentives in the form of stock options.
Medical coverage.
Vision coverage.
Dental coverage.
Access to a 401(k) retirement plan.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume