Manager - Cybersecurity

Starlab Space is a US-led joint venture and partner network that is ensuring continued human present in low-earth orbit and dedicated to providing a seamless transition of microgravity research from the International Space Station into the new commercial space station era. Our global team combines decades of flight heritage and human spaceflight experience, from habitat infrastructure and robotic arms to daily payload operations and more.

We firmly believe in space as a tool for transformation, one that can exponentially improve life on earth.

Learn more about us at https://starlab-

Starlab Space, LLC is seeking its first Manager of Cyber Security. This individual will be responsible for the security of Starlab's systems in accordance with our policies and the requirement of relevant government agencies. The successful candidate will have the competencies required to set up our cyber security protocols, liaise with internal and external stakeholders, and navigate the ever-changing requirements of this function.

The Cybersecurity Manager is responsible for ensuring the safety of information systems assets and protecting systems from intentional or inadvertent access or destruction.

Responsibilities:

• Develops and implements enterprise information security architectures and solutions
• Serves as a security expert in application development, database design, network, and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices
• Researches, designs, and advocates new technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors
• Contributes to the development and maintenance of information security strategy and architecture
• Analyzes business impact and exposure based on emerging security threats, vulnerabilities, and risks
• Develops and executes security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based systems
• Researches attempted or successful efforts to compromise systems security and designs countermeasures
• Maintains hardware, software and network firewalls and encryption protocols
• Administers security policies to control physical and virtual access to systems
• Provides information to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information and systems.
• Manages and partners with third party information security vendors
• Partners and works with Government agencies, including NASA, the Department of Defense (DoD) and other relevant agencies, on information security matters
• Communicates security risks and solutions to business partners and IT staff as needed
• Participates in annual Information Security training/fairs
• Attends cybersecurity events and participates in other external cybersecurity activities to maintain current in the field
• Responds to emergencies and remediates information security incidents
• Protected Data & Classification of Data – The position will be responsible for knowledge of government data protection requirements such as but not limited to NIST moderate & high), NIST , Controlled Unclassified Information (CUI), Export controlled/ITAR regulations and subsequent execution or participating with team members in data protection strategies & implementations.
• Develop Cybersecurity protection roadmap & steps to implementation.

EDUCATION

Bachelor's degree (B.S.) from four-year college or university in Cybersecurity related discipline

CERTIFICATIONS & LICENSES

Certifications preferred but not required include CISSP, CISM, etc.

Active DoD security clearance preferred

EXPERIENCE AND REQUIREMENTS

• 5-7 years of directly related experience and/or training; or equivalent combination of education and experience
• Experience in aerospace strongly preferred
• Experience and competency in: cloud security posture management (CSPM); identity & access management (IAM); data loss & CUI prevention; SIEM & threat monitoring; endpoint detection and response (EDR)
• Microsoft Office Suite (i.e., Outlook, Word, Access, Excel, PowerPoint, Project, Visio, etc.)
• Support ticketing systems, change control methodologies and their importance to ITIL best practices
• IT security concepts and application to ERP, Business systems, & applications.
• Ability to travel domestically and internationally up to 25%

Starlab offers a comprehensive, total compensation package, which includes competitive salary, a discretionary annual bonus plan, unlimited paid time off (PTO), a comprehensive health benefit package, retirement savings, wellness program, and various other benefits. When you join our team, you're not just an employee; you become part of a dynamic community dedicated to innovation and excellence.

To meet obligations and signed agreements with NASA which allow access to necessary and critical data to perform these duties, you must be eligible to obtain the required authorizations from NASA, which authorization would not be granted for persons born in, or who have current or dual citizenship in, Russia, China (PRC) or any country from the designated countries list ) that is on the State Sponsors of Terrorism list.

Starlab is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.

Minority/Female/Disabled/Veteran

The statements contained in this job description are intended to describe the general content and requirements for performance of this job. It is not intended to be an exhaustive list of all job duties, responsibilities, and requirements. This job description is not an employment agreement or contract. Management has the exclusive right to alter the scope of work within the framework of this job description at any time without prior notice.