Information Systems Security Manager

Karman Space & Defense•Huntington Beach, CA

8d•$90,000 - $120,000

About The Position

The Information Systems Security Manager (ISSM) leads Karman Space & Defense’s cybersecurity program, ensuring information systems operate securely and comply with regulatory and company requirements. The role drives risk management, authorization activities, continuous monitoring, incident response, and security governance while partnering across functions to support secure business operations. The position requires U.S. person status under U.S. export control laws. Eligible statuses include U.S. citizens and nationals, lawful permanent residents, refugees, and asylees.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Minimum one year of experience in information systems security, cybersecurity compliance, or a related field.
Experience with RMF, National Institute of Standards and Technology (NIST) frameworks, or similar cybersecurity frameworks.
U.S. person status under U.S. export control laws, including U.S. citizens and nationals, lawful permanent residents, refugees, and asylees.

Nice To Haves

Master’s degree.
Experience supporting classified environments and government compliance requirements.
Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent certification.
CompTIA Security+, Certified Ethical Hacker (CEH), or other relevant cybersecurity certifications.

Responsibilities

Manage the cybersecurity governance framework aligned with the Risk Management Framework (RMF) and company policies, including policies, standards, and continuous monitoring plans.
Lead enterprise risk assessments, advise leadership on system authorizations, and drive remediation activities.
Oversee compliance, continuous monitoring, and incident response activities for information systems.
Lead and mentor Information System Security Officers (ISSOs) and security personnel to strengthen security practices across operations.
Coordinate inspections, vulnerability management activities, audit readiness efforts, and corrective actions.
Review and analyze security logs and events, triage incidents, and document required actions in accordance with regulatory requirements.
Support insider threat and security investigation activities in partnership with Human Resources, Legal, and Physical Security teams.
Support communications security (COMSEC), operations security (OPSEC), and implementation of security controls for restricted work environments.
Oversee physical security system support activities, including access control, alarm systems, and video surveillance.
Develop and deliver security awareness training, compliance reporting, and dashboards related to vulnerabilities, remediation, inspections, and system compliance.