Information Systems Security Manager (TS//SCI)

K2 Space • Los Angeles, CA

16h • Onsite

About The Position

K2 is building the largest and highest-power satellites ever flown, unlocking performance levels previously out of reach across every orbit. They are mass-producing high-power satellite platforms for missions from LEO to deep space, backed by $450M from investors and $500M in signed contracts. The company believes in a new class of spacecraft for the era of mass abundance, engineered to survive harsh radiation environments and capitalize on massive rockets. With multiple launches planned through 2026 and 2027, K2 Space aims to develop the solar system and become a Kardashev Type II (K2) civilization. The Information Systems Security Manager (ISSM) will oversee and maintain compliance with cybersecurity regulations and best practices for K2 Space's space systems and infrastructure. This role involves developing, implementing, and managing security policies, risk assessments, and security controls to protect classified and unclassified information systems. The ideal candidate is self-motivated, able to coordinate with national security stakeholders, and will provide Cyber Security technical leadership as the ISSM. They will manage internal/external customer expectations for security architecture, provide Cyber Security expertise on projects, and execute on program performance, delivery, and milestone completion, including Assessment & Authorization (A&A) events. The ISSM will also provide Cyber Security input and support for the implementation and test of secure operating systems/networks, DevSecOps, and cloud solutions. K2 Space is a fast-paced startup environment, requiring the ISSM to quickly adapt and implement solutions.

Requirements

• Master’s degree in cybersecurity, IT, or a related field +4 years’ experience or Bachelor’s degree in cybersecurity, IT, or a related field, + 6 years’ experience.
• 5+ years working in information assurance for national security systems.
• Hands-on experience with NIST SP 800-53, DoDI 8510.01, CNSSI 1253, JSIG/ICD 503, and STIG/SRG application and other DoD cybersecurity policies.
• Proficiency in vulnerability and compliance tools: Tenable Nessus, SCAP, DISA STIG Viewer, log/monitoring, and familiarity with patch management.
• Experience developing and maintaining SSP, SAR/SAP, POA&M, and RMF evidence with strong technical writing skills.
• Knowledge of network security, Windows/Linux hardening, virtualization, endpoint protection, identity & access management, encryption/key management, and secure configuration baselines.
• Strong understanding of system security architecture and risk management.
• Experience as an ISSM, ISSO, or ISSE.
• Current DoD 8570/8140 Tier III certification or higher (CISSP, CISM, etc.).
• Active TS/SCI Clearance, and willingness to submit to a CI polygraph.
• Exceptional written and verbal communication skills.

Nice To Haves

• Additional cybersecurity certifications (CAP, CEH, GSEC, GSLC).
• Experience supporting Defense and Intelligence Community programs.
• Familiarity with secure cloud and hybrid environments (e.g., DoD Cloud SRG, IL2–IL6, GovCloud, IC ITE).
• Experience in standing up new secure networks at a commercial organization (SCI or SAP).
• Experience obtaining Authority to Operate (ATO) of an operational aerospace system (satellite, aircraft, etc.).

Responsibilities

• Build and manage a team of highly capable Information System Security Officers.
• Develop and maintain a formal Information Systems Security Program.
• Ensure compliance with NIST, RMF, and other relevant cybersecurity frameworks.
• Develop, implement, and enforce information security policies and procedures.
• Conduct risk assessments, vulnerability analyses, and security audits.
• Manage security authorization packages and maintain system accreditations.
• Institute and implement a Configuration Control Board (CCB) charter.
• Ensure that all ISSOs, network administrators, System Administrators and other cyber security personnel receive the necessary technical and annual training to carry out their duties.
• Coordinate with CPSO on approval of external information systems (e.g., guest systems, interconnected system with another organization).
• Work closely with IT, engineering, program management and government agencies to ensure secure operations.
• Provide security training and awareness programs for employees.
• Investigate and respond to security incidents and implement corrective actions.

Benefits

• Base salary range for this role is $160,000 - $200,000 + equity in the company
• Comprehensive benefits package including paid time off, medical/dental/vision coverage, life insurance, paid parental leave, and many other perks

What This Job Offers

• Job Type: Full-time
• Career Level: Senior