SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.
INFORMATION SYSTEM SECURITY MANAGER
SpaceX is seeking a classified cyber assurance practitioner to drive the SpaceX classified cyber assurance program forward. The program focuses on three major areas:
- Assessment: Assessing the state of the classified cyber assurance program against industry standards, requirements (contractual and regulatory), and organizational needs.
- Governance: Managing and spearheading governance of the classified cyber assurance program to interpret and drive implementation of industry standards, requirements (contractual and regulatory), and organizational needs.
- Communications: Be "the face" of classified cyber assurance program to both internal and external stakeholders (e.g. customer, regulatory, government and supplier entities).
The successful candidate will assist in driving the classified assurance team to ensure SpaceX delivers on customer requirements, reduces risk, and ensures mission success. We are a fast paced, multi-tasking, highly dynamic work environment with high degrees of autonomy and accountability.
RESPONSIBILITIES:
- Responsible for the complete RMF A&A lifecycle process for assigned SpaceX classified information systems
- Ensure compliance with existing regulatory, policy, and contractual requirements as they pertain to SpaceX classified information systems
- Responsible for identification, triage, and implementation of new regulatory and contractual requirements into both broad and specific applications
- Keep apprised of emerging community practices, risks, and threats
- Plan, prepare for, schedule and coordinate audits, assessments, and tests
- Identify, evaluate, and select various automation, assessment, and management tool sets to drive effectiveness and efficiencies
- Provide expert knowledge of Nessus, Splunk and Security Center tools