Information Assurance Deputy Director

York Space Systems was founded to radically improve spacecraft affordability and reliability, transforming, and enabling next- generation space mission operations worldwide. Today, York is one of the most innovative aerospace companies, specializing in end-to-end customer solutions and the rapid production of spacecraft platforms. York's complete Space Segment Solution includes spacecraft production, payload integration, system integration & test, launch services, ground segment services, and mission operations, enabling customers to leverage York's existing technology solutions to get to orbit rapidly and responsively. We're looking to expand our team across the board.

The Information Assurance Deputy Director serves as the senior cybersecurity authority overseeing the compliance, authorization, and operational resilience of secure enterprise networks, classified enclaves, and mission IT infrastructure. This leadership role unifies cybersecurity compliance and technical execution by managing DoD and IC Information System Security Managers (ISSMs) alongside the Mission IT Lead, Systems Administrators, and Network Architects.

The Information Assurance Deputy Director will drive governance, risk, and compliance (GRC) strategies across multi-tenant classified programs while maintaining hands-on oversight over IT infrastructure design, continuous monitoring, and system administration. The ideal candidate bridges the gap between high-level federal compliance standards (DoD RMF, ICD 503, NISPOM, CMMC) and practical network architecture, ensuring mission platforms remain secure, operational, and fully compliant.

This role will be fully on-site in our Greenwood Village, Colorado office.

Responsibilities

Governance, Risk & Compliance (GRC) Leadership

• Oversee the end-to-end Risk Management Framework (RMF) lifecycle for all Department of Defense (DoD) and Intelligence Community (IC) classified and unclassified systems.
• Lead the creation, submission, and maintenance of System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), Plan of Action & Milestones (POA&Ms), and Authorization to Operate (ATO) packages across eMASS and XACTA systems.
• Serve as the primary cybersecurity interface to Authorizing Officials (AOs), Security Control Assessors (SCAs), DCSA, and customer security representatives.
• Ensure organizational alignment with CMMC 2.0, NIST SP 800-53, NIST SP 800-171, NISPOM (32 CFR Part 117), ICD 503, and JSIG requirements.

Technical & Mission IT Infrastructure Oversight

• Provide operational direction to the Mission IT Lead to ensure network infrastructure and system administration efforts adhere strictly to cybersecurity architecture standards.
• Review and approve system architectural designs, cross-domain solutions (CDS), hardware/software baseline updates, and network topology modifications for classified environments.
• Enforce implementation of DISA Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP) benchmarks, and automated continuous monitoring tools.
• Drive Zero Trust Architecture (ZTA) initiatives, network segmentation, identity and access management (IAM), and centralized logging strategies across secure enclaves.

Cybersecurity Operations & Incident Response

• Lead the enterprise Cyber Incident Response Team (CIRT); direct containment, eradication, forensic investigations, and reporting of security incidents in compliance with federal guidelines.
• Oversee vulnerability management programs, ensuring routine scanning (Tenable/Nessus, ACAS), patch management, and remediation timelines are strictly enforced.
• Collaborate with the Insider Threat Program Senior Official to integrate audit logging, SIEM alerts, and user activity monitoring (UAM) mechanisms.

Team Management & Operational Budgeting

• Directly manage, mentor, and evaluate the performance of DoD/IC ISSMs and technical IT leadership.
• Establish standardized operational procedures (SOPs), cybersecurity policies, and technical baselines across all program enclaves.
• Manage hardware/software procurement requests, licensing, and cybersecurity budgeting requirements.

This role will have direct reports.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related technical discipline (Master's degree preferred).
• Minimum of 8+ years of progressive experience in Information Assurance, Cybersecurity, and Mission IT operations, with at least 3-5+ years in a supervisory/management capacity.
• Proven experience managing ATO pipelines under both DoD RMF (eMASS) and IC RMF (ICD 503 / XACTA).
• Demonstrated experience leading network engineering and systems administration staff within secure environments.
• Security Clearance: Active Top Secret / SCI clearance.
• Exceptional oral/written communication skills, cross-functional project management, and government auditor interaction skills.
• Mandatory Certifications (DoD 8140 / 8570 IAM Level III):
  • Must hold at least one active IAM Level III certification upon hire:
  • CISSP (Certified Information Systems Security Professional)
  • CISM (Certified Information Security Manager)
  • GSLC (GIAC Security Leadership Certification)
  • CCISO (Certified Chief Information Security Officer)

• Technical & Core Competencies:
  • Compliance Frameworks: NIST SP 800-53, NIST SP 800-171, RMF, ICD 503, JSIG, DAAPM, NISPOM, CMMC 2.0.
  • Systems & Platforms: Windows Server / Linux RHEL administration, VMware vSphere, Cisco/Juniper networking, Active Directory/PKI, eMASS, XACTA.
  • Cybersecurity Tools: ACAS/Nessus, Splunk/SIEM platforms, HBSS/ESS, SCAP Compliant Compliance Checker.
• Willingness to work full-time in our Greenwood Village, CO office; this position does not support remote or hybrid work.

In compliance with local law, we are disclosing the compensation, or a range thereof, for roles in locations where legally required. Actual salaries will vary based on several factors, including but not limited to external market data, internal equity, location, skill set, experience, and/or performance.

Benefits

• 100% employer-paid medical, dental, and vision insurance (subject to spousal surcharge).
• Company holidays, floating holidays, and sick time.
• Unlimited PTO.
• Generous 401(k) match.
• Participation in our discretionary annual bonus and equity programs.

This role is eligible to participate in our equity award program. Any award is discretionary and not guaranteed and may be contingent upon individual and/or Company performance. The amount, timing, and terms of any equity award will be determined in accordance with the Company's equity incentive plan and applicable policies. Other rewards may include annual bonuses, short- and long-term incentives, and accomplishment-specific awards.

How To Apply
Interested candidates are encouraged to apply by clicking the "Apply" link at the top of the page. York Space Systems will be accepting applications on a rolling basis until the position is closed. York Space Systems provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, military or protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Must have permanent authorization to work in the United States. This policy applies to all terms and conditions or employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. YORK SPACE SYSTEMS IS AN EEO EMPLOYER.