Information Assurance Deputy Director with Security Clearance

York Space Systems was founded to radically improve spacecraft affordability and reliability, transforming, and enabling next- generation space mission operations worldwide. Today, York is one of the most innovative aerospace companies, specializing in end-to-end customer solutions and the rapid production of spacecraft platforms. York's complete Space Segment Solution includes spacecraft production, payload integration, system integration & test, launch services, ground segment services, and mission operations, enabling customers to leverage York's existing technology solutions to get to orbit rapidly and responsively.

We're looking to expand our team across the board. The Information Assurance Deputy Director serves as the senior cybersecurity authority overseeing the compliance, authorization, and operational resilience of secure enterprise networks, classified enclaves, and mission IT infrastructure. This leadership role unifies cybersecurity compliance and technical execution by managing DoD and IC Information System Security Managers (ISSMs) alongside the Mission IT Lead, Systems Administrators, and Network Architects.

The Information Assurance Deputy Director will drive governance, risk, and compliance (GRC) strategies across multi-tenant classified programs while maintaining hands-on oversight over IT infrastructure design, continuous monitoring, and system administration. The ideal candidate bridges the gap between high-level federal compliance standards (DoD RMF, ICD 503, NISPOM, CMMC) and practical network architecture, ensuring mission platforms remain secure, operational, and fully compliant.

This role will be fully on-site in our Greenwood Village, Colorado office. Responsibilities Governance, Risk & Compliance (GRC) Leadership
* Oversee the end-to-end Risk Management Framework (RMF) lifecycle for all Department of Defense (DoD) and Intelligence Community (IC) classified and unclassified systems.
* Lead the creation, submission, and maintenance of System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), Plan of Action & Milestones (POA&Ms), and Authorization to Operate (ATO) packages across eMASS and XACTA systems.
* Serve as the primary cybersecurity interface to Authorizing Officials (AOs), Security Control Assessors (SCAs), DCSA, and customer security representatives.
* Ensure organizational alignment with CMMC 2.0, NIST SP 800-53, NIST SP 800-171, NISPOM (32 CFR Part 117), ICD 503, and JSIG requirements. Technical & Mission IT Infrastructure Oversight
* Provide operational direction to the Mission IT Lead to ensure network infrastructure and system administration efforts adhere strictly to cybersecurity architecture standards.
* Review and approve system architectural designs, cross-domain solutions (CDS), hardware/software baseline updates, and network topology modifications for classified environments.
* Enforce implementation of DISA Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP) benchmarks, and automated continuous monitoring tools.
* Drive Zero Trust Architecture (ZTA) initiatives, network segmentation, identity and access management (IAM), and centralized logging strategies across secure enclaves. Cybersecurity Operations & Incident Response
* Lead the enterprise Cyber Incident Response Team (CIRT); direct containment, eradication, forensic investigations, and reporting of security incidents in compliance with federal guidelines.
* Oversee vulnerability management programs, ensuring routine scanning (Tenable/Nessus, ACAS), patch management, and remediation timelines are strictly enforced.
* Collaborate with the Insider Threat Program Senior Official to integrate audit logging, SIEM alerts, and user activity monitoring (UAM) mechanisms. Team Management & Operational Budgeting
* Directly manage, mentor, and evaluate the performance of DoD/IC ISSMs and technical IT leadership.
* Establish standardized operational procedures (SOPs), cybersecurity policies, and technical baselines across all program enclaves.
* Manage hardware/software procurement requests, licensing, and cybersecurity budgeting…