Apex Space logo

Information Systems Security Manager (ISSM)

Apex Space
2 days ago
Full-time
On-site
Los Angeles, California, United States

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.

For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.

Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.

We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet. 

About the Role

The Information Systems Security Manager (ISSM) is a senior cybersecurity leadership role responsible for overseeing the cybersecurity posture of one or more programs, organizations, systems, or enclaves. This position ensures the confidentiality, integrity, and availability of information systems, particularly in regulated environments such as DoD, federal agencies, or classified programs. The ISSM serves as the principal advisor on information system security matters, manages compliance with frameworks such as the Risk Management Framework (RMF), and leads efforts to obtain and maintain an Authority to Operate (ATO). This role combines strategic risk management, policy development, team leadership, and hands-on oversight of security operations to mitigate threats and vulnerabilities.


Key Responsibilities

  • Oversee the development, implementation, and maintenance of comprehensive
    cybersecurity programs, including policies, standards, procedures, and controls aligned with NIST SP 800-53, DoD RMF, FISMA, NISPOM, and other relevant regulations.

  • Manage the full RMF lifecycle for information systems, including categorization, control
    selection/implementation, security assessments, authorization packages (e.g., System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Actions and Milestones (POA&Ms)), and achieving/maintaining ATO/IATT approvals.

  • Conduct risk and vulnerability assessments, identify threats, and recommend prioritized mitigation strategies to reduce organizational risk.

  • Advise senior leadership (e.g., Authorizing Official, Director of IT & Cybersecurity,
    program managers) on cybersecurity risks, posture changes, resource needs, and security implications of system changes or new technologies.

  • Lead continuous monitoring efforts, including vulnerability scanning, configuration
    management, audit log reviews, and incident detection/response coordination.

  • Develop and enforce security policies, ensure compliance with DoD/DISA requirements, and oversee security controls for classified and unclassified systems (e.g., cloud, on-premise, air-gapped).

  • Manage and mentor a team of Information System Security Officers (ISSOs), analysts,
    and support staff; provide training and guidance on security best practices.

  • Coordinate security incident response, including detection, analysis, containment,
    recovery, reporting, and lessons learned.

  • Facilitate audits, inspections, and compliance reviews; prepare documentation and evidence for external assessors or authorizing officials.

  • Acquire and manage resources (budget, personnel, tools) to support cybersecurity
    objectives and embed security into system development lifecycles.

  • Stay current with emerging threats, vulnerabilities, technologies, and regulatory changes to proactively adapt security strategies.

  • Assist with CMMC lvl2-3 (NIST SP 800-171), and ISO270001 accreditation.

  • Assist with other IT & Cybersecurity tasks when needed.


Requirements

  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; Master's degree preferred.

  • Active TS/SCI security clearance

  • Minimum of 7-10 years of progressive experience in cybersecurity, with at least 3-5 years in an ISSM, senior ISSO, or equivalent leadership role managing information system security in DoD, federal, or classified environments.

  • In-depth knowledge of NIST Risk Management Framework (RMF), NIST SP 800-53 controls, DoD Instruction 8510.01, CNSSI 4009, and related standards.

  • Proven experience leading ATO processes, preparing accreditation packages, and achieving/maintaining system authorizations.

  • Strong understanding of cybersecurity principles, including vulnerability management, incident response, access controls, encryption, network security, and supply chain risk.

  • Experience with tools for vulnerability scanning, SIEM, configuration management, and continuous monitoring.

  • Excellent leadership, communication, and advisory skills to influence stakeholders at all levels.

  • In-depth knowledge of cloud technology such as IaaS, PaaS, and SaaS (e.g. AWS GovCloud, GCP, and Azure)

  • Relevant certifications such as:

    • CISSP (Certified Information Systems Security Professional)

    • CISM (Certified Information Security Manager)

    • CCSP (Certified Cloud Security Professional)

    • CompTIA Security+, CGRC (formerly CAP), or equivalent highly desirable

  • U.S. citizenship is required

Compensation

Salary Range: $168,000-$231,000 a year, plus equity.

The stated compensation range reflects only the targeted base salary range and excludes additional benefits. If your salary requirements fall outside of the range, we still encourage you to apply.

Why Join Apex?

Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup backed by $200M in Series D funding, and we invest heavily in our people from day one.

What We Offer For Full-time Employees:

  • Shared upside: Receive equity in Apex, letting you benefit from the work you create

  • Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost

  • Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays

  • Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%

  • 8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel

  • Daily catered lunch and unlimited snacks to keep you fueled throughout the day

  • Vibrant community: Monthly office BBQs, pickleball tournaments, run club, and social gatherings for you and your family

  • Your dream desk setup and all the tools you need to be your most productive self

  • World-class Playa Vista office with EV chargers, with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life

  • Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference

Ready to join a team where your contributions matter and your future is bright? Let's build something extraordinary together.

Equal Opportunity Employer

Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.

Compensation Range: $168K - $231K