Information Systems Security Manager (ISSM) at Astranis

San FranciscoFull-time5101 USG ProgramsPosted 1 day ago

About the Role

<div class="content-intro">Astranis builds advanced satellites for high orbits, expanding humanity’s reach into the solar system. Today Astranis satellites provide dedicated, secure networks to highly-sophisticated customers across the globe – large enterprises, sovereign governments, and the US military.  With five satellites on orbit and many more set to launch soon, the company is servicing a backlog of more than $1 billion of commercial contracts. Astranis is the preferred satellite communications partner for buyers with stringent requirements for uptime, data security, network visibility, and customization. Astranis has raised over $1.2 billion from some of the world’s best investors, including Andreessen Horowitz, Baillie Gifford, Blackrock, Fidelity, Franklin Templeton, and Snowpoint, and employs a team of 500 engineers and entrepreneurs. Astranis designs, builds, and operates its satellites out of its 153,000 sq. ft. headquarters in Northern California, USA.</div>Information Systems Security Manager (ISSM) The Information Systems Security Manager (ISSM) is responsible for leading the development, implementation, and oversight of Risk Management Framework (RMF), Information Security, and information assurance programs supporting classified and unclassified systems across collateral and Sensitive Compartmented Information Facility (SCIF) environments. This role ensures compliance with 32 CFR Part 117 (NISPOM) and applicable Intelligence Community Directives (ICDs), safeguarding national security information while enabling mission success. The ISSM serves as the principal advisor on all classified information system security matters and collaborates closely with government customers, security leadership, and technical teams to maintain secure, compliant, and inspection-ready environments.  Working in coordination with the Chief Security Officer, the ISSM implements enterprise common controls and represents the organization with U.S. Government accrediting authorities, including Authorizing Officials (AOs) and Security Control Assessors (SCAs). The ISSM ensures a strong operational security posture across local area networks (LANs), wide area networks (WANs), and standalone systems through proactive risk management and continuous monitoring. Role <ul> <li> Program Leadership, Compliance & RMF <ul class="ul1"> <li class="li2">Lead and manage the Information System Security Program in accordance with NISPOM and applicable ICDs (e.g., ICD 503, ICD 705). </li> <li class="li2">Serve as principal advisor on all classified systems security matters. </li> <li class="li2">Oversee RMF lifecycle activities, including system categorization, control implementation, assessment, authorization, and continuous monitoring. </li> <li class="li2">Ensure systems meet classified processing requirements and maintain proper accreditation status. </li> <li class="li2">Develop, review, and maintain System Security Plans (SSPs), policies, procedures (SPPs), and supporting artifacts. </li> <li class="li2">Represent the organization with accrediting authorities; review and approve authorization packages. </li> <li class="li2">Interface directly with Security Control Assessors (SCAs) to demonstrate compliance during assessments. </li> </ul> System Security & Continuous Monitoring <ul class="ul1"> <li class="li2">Manage continuous monitoring programs, including vulnerability assessments, POA&M tracking, and audit reviews. </li> <li class="li2">Analyze SIEM outputs and audit logs to identify anomalous or unauthorized activity. </li> <li class="li2">Conduct self-assessments and implement corrective actions to address vulnerabilities and compliance gaps. </li> <li class="li2">Maintain accurate system documentation, including SSPs, POA&Ms, and risk assessment reports. </li> <li class="li2">Ensure configuration management, patching, and system hardening in alignment with STIG requirements. </li> </ul> Network, Operations & Incident Response <ul class="ul1"> <li class="li2">Oversee the cybersecurity posture of LANs, WANs, and standalone systems. </li> <li class="li2">Monitor systems to detect threats, vulnerabilities, and operational risks. </li> <li class="li2">Manage COMSEC, media control, and data spill response procedures across classified environments. </li> <li class="li2">Develop and execute incident response processes for spills, malware, and insider threat activities. </li> <li class="li2">Investigate, document, and report incidents in accordance with government requirements. </li> <li class="li2">Assess the security impact of system changes and support formal change management processes. </li> </ul> Inspections, Training & Governance <ul class="ul1"> <li class="li2">Lead and support inspections, audits, and assessments conducted by DCSA and Intelligence Community stakeholders. </li> <li class="li2">Engage directly with government representatives to validate compliance with technical and policy requirements. </li> <li class="li2">Review and implement security advisories, directives, and emerging requirements. </li> <li class="li2">Deliver security education and awareness training to users, administrators, and leadership. </li> <li class="li2">Develop and enforce classified system policies, procedures, and standard operating procedures (SOPs). </li> <li class="li2">Communicate security responsibilities clearly across all organizational levels. </li> </ul> </li> </ul> Requirements <ul> <li class="li1">Active U.S. Government Top Secret clearance with SCI eligibility. </li> <li class="li1">Bachelor’s degree in a related field or equivalent experience. </li> <li class="li1">8+ years of experience in ISSM roles supporting classified systems in collateral and SCIF environments. </li> <li class="li1">Demonstrated experience with eMASS and participation in DCSA assessments. </li> <li class="li1">Current CompTIA Security+ (or equivalent) certification in compliance with DoD Directive 8140.</li> <li class="li1">Strong expertise in RMF and working knowledge of NISPOM, ICD 503, ICD 705, and NIST standards. </li> <li class="li1">Experience with vulnerability scanning tools (e.g., ACAS), SIEM platforms, and STIG implementation across Windows and Linux systems. </li> <li class="li1">Proven leadership, communication, and stakeholder engagement skills. </li> <li class="li1">Preferred certifications: CISSP, CISM, or CAP.</li> </ul><div class="content-pay-transparency"><div class="pay-input"><div class="description"><div>What we offer: </div> <div> </div> <div>All our positions offer a compensation package that includes equity and robust benefits.</div> <div> </div> <div> Base pay is just one component of Astranis’s total rewards package. Your compensation also includes a significant equity package via incentive stock options, high-quality company-subsidized healthcare, disability and life insurance, 401(k) retirement planning, flexible PTO, and free on-site catered meals. </div> <div>Astranis pay ranges are informed and defined through professional-grade salary surveys and compensation data sources. The actual base salary offered to a successful candidate will additionally be influenced by a variety of factors including experience, credentials & certifications, educational attainment, skill level requirements, and the level and scope of the position.</div></div><div class="title">Base Salary</div><div class="pay-range">$150,000—$218,000 USD</div></div></div><div class="content-conclusion"><div>U.S. Citizenship, Lawful Permanent Residency, or Refugee/Asylee Status Required</div> <div>(To comply with U.S. Government space technology export regulations, applicant must be a U.S. citizen, lawful permanent resident of the United States, or other protected individual as defined by 8 U.S.C. 1324b(a)(3))</div> <div> </div> <div>Our mission and products are built for everyone, regardless of gender, race, creed, or background. We believe in a diverse and inclusive workplace, and we invite all people to join our team and bring their unique perspectives to make us stronger.</div> <h4>Astranis SMS Terms of Service</h4> <ol> <li> Recruiting Updates: By opting in, you agree to receive SMS updates, interview coordination, and recruiting communications from Astranis Space Technologies Corp. </li> <li> Opt-Out: You can cancel this service at any time by replying STOP. We will send one final text confirming your unsubscription. </li> <li> Opt-In Again: To resume receiving messages, reply START or YES. </li> <li> Support & Rates: For assistance, reply HELP or contact us at [email protected]. Message and data rates may apply. Message frequency varies; carriers are not liable for delayed or undelivered messages. </li> <li> Privacy: For details on how we protect your data, view our <a href="https://www.google.com/url?q=https%3A%2F%2Fwww.astranis.com%2Flegal%2Fprivacy" target="_blank">Privacy Policy</a>. </li> </ol></div>

About the Role

Related Roles