Information Systems Security Manager

General Matter • Los Angeles, CA

12h

About The Position

General Matter is seeking a classified cyber assurance expert to build out GRC and RMF processes within the Software organization and ensure mission success. The role owns key aspects of the information systems security program, including representing the program to internal and external parties, serving as the Software organization’s subject matter expert for regulatory compliance, and interpreting requirements to unblock engineering teams and deliver compliance.

The position owns the RMF lifecycle for classified information systems, supports provable regulatory compliance, and works closely with engineers and government partners. It also helps build security into the operational model and develops automated tools and a GRC suite to support assessment, auditing, and enforcement across classified systems.

Requirements

• Evidence of exceptional ability, such as prior projects, a portfolio of work, or completed products.
• Strong understanding of engineering fundamentals.
• Ability to perform trade studies and make clear recommendations using first principles and engineering fundamentals, including with partial information.
• At least 3 years of experience managing cyber assurance for classified computer networks.
• Ability to obtain and maintain eligibility for a DoE Q-level clearance.
• Ability to work extended hours and weekends as necessary.

Nice To Haves

• Experience operating in a NIST 800-53 environment.
• Experience in a fast-paced engineering or highly technical environment, with a resourceful approach to delivering under tight timelines or budget constraints.
• Experience building an approved classified space from the ground up on ambitious timelines.
• Expertise with the 7-step RMF process and how it relates to modern software development.
• Experience implementing 10 CFR Part 810 export-control and U.S.-person access restrictions as enforced technical controls on classified systems, in coordination with the FSO.
• Experience obtaining ATOs under DoD or DOE authorization boundaries.
• Expertise with COMSEC procedures and practices.
• Experience writing and delivering complex software systems in a highly regulated environment.

Responsibilities

• Own the RMF lifecycle to ensure regulatory compliance for General Matter classified information systems.
• Ensure classified information systems remain provably compliant with regulatory requirements.
• Collaborate with internal engineering teams to manage regulatory overhead risk and support mission success without compromising security.
• Work with software engineers to evaluate and build automated tools for security policy assessment, auditing, and enforcement at scale.
• Work with government partners to plan and coordinate external audits and tests.
• Assist in building the GRC suite of tools used across classified information systems.
• Represent and own General Matter’s information systems security program in relation to internal and external parties.
• Serve as the Software organization’s subject matter expert for regulatory-compliance processes.
• Clarify and interpret requirements to unblock engineering teams and deliver compliance.
• Build security into General Matter’s operational model as a first-order requirement at all levels of the software stack.

Benefits

• Long-term incentives in the form of stock options may be available to full-time hires.
• Medical coverage.
• Vision coverage.
• Dental coverage.
• Access to a 401(k) retirement plan.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed