Sr. Cyber Assurance Manager

Want to drive impact on a global and interplanetary scale?  SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.

SR. CYBER ASSURANCE MANAGER

Compliance is more than doing what is forced upon us; it's about driving and delivering against our trust proposition, enabling teams across the company to meet the standards we set upon ourselves.  It's about aggregating internal and external expectations and creating THE expectation.  And then it's about enabling our teams to meet and exceed this bar in a highly efficient and effective manner.  If the thought of a compliance program which is integrated with business operations and works to proactively defend and enable opportunity is motivating, then we should talk.

This teammate will operate within the Information Assurance team and will be assisting with the maturation and implementation of our information compliance program in collaboration with the Information Assurance Lead and taking on additional leadership roles as needed. This position will also involve hands-on execution of the compliance program, assessment and audit execution, the development of control application efficiencies ad recommendations, and mentoring fellow Information Assurance team members. The ideal candidate will be driven to create efficiencies that are firm when it matters but also flexible enough to move the ball forward.  They will excel at multi-tasking and flourish in an environment where learning never ceases, where the breadth of operations ranges from rockets to routing tables, and where teams are laser focused on mission accomplishment -- excitement guaranteed!

RESPONSIBILITIES:

• Mature and maintain a comprehensive Security and IT Compliance program
• Manage identification and tracking of audits, assessments and their impacted programs and business objectives; identified gaps, corrective action plans/plans of action & milestones, and provide reporting to leadership
• Develop and maintain a cyber and IT control framework and controls catalog including unified and common control features
• Design and implement a cyber and IT controls assessment and assurance process and tooling
• Develop and maintain of IT and security policies and standards
• Work with other SpaceX teams to determine functional needs, implement efficient and sustainable solutions and communicate security policies
• Mentor fellow teammates and take an active role in their development
• Collaborate with Assurance, Security, IT, and business leaders to create aligned program objectives and key results
• Identify and propose business enabling actions by maintaining an up-to-date understanding of emerging trends in information security risks and new compliance/assurance techniques and trends

BASIC QUALIFICATIONS:

• Bachelor’s degree in information systems, information security, computer science, engineering or STEM discipline and 7+ years of compliance and audit management experience; OR 10+ years combined experience across program, compliance, and audit management
• 5+ years’ experience implementing compliance management programs, unified and common control frameworks, and audit preparation and sustainment efficiencies

PREFERRED SKILLS AND EXPERIENCE:

• CISSP, CISA, or equivalent certification/experience
• Deep understanding of information security control and management frameworks: CMMC, ISO-27001, NIST 800-171/172, NIST 800-53, etc.; and applicable U.S. government acquisition regulations
• GRC, SOX, PCI, CMMC and/or business resiliency experience
• Strong communication skills across all organizational levels and ability to build cross organizational coalitions
• Direct experience with regulatory compliance reviews and examinations
• Project and program management experience, tooling integration, and delivery in highly fluid environments
• Ability to communicate technical and security-related concepts to a broad range of technical and non-technical staff, security vendors, consultants and senior management

ADDITIONAL REQUIREMENTS:

• Willingness to work extended hours and weekends as needed

COMPENSATION AND BENEFITS:                             

Pay Range:         
Cyber Assurance Manager: $130,000.00 - $180,000.00/per year  

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.

Base sala