Information Systems Security Manager (ISSM)

The Information Systems Security Manager (ISSM) is a senior cybersecurity leadership role responsible for overseeing the cybersecurity posture of one or more programs, organizations, systems, or enclaves. This position ensures the confidentiality, integrity, and availability of information systems, particularly in regulated environments such as DoD, federal agencies, or classified programs. The ISSM serves as the principal advisor on information system security matters, manages compliance with frameworks such as the Risk Management Framework (RMF), and leads efforts to obtain and maintain an Authority to Operate (ATO). This role combines strategic risk management, policy development, team leadership, and hands-on oversight of security operations to mitigate threats and vulnerabilities., * Oversee the development, implementation, and maintenance of comprehensivecybersecurity programs, including policies, standards, procedures, and controls aligned with NIST SP 800-53, DoD RMF, FISMA, NISPOM, and other relevant regulations.

• Manage the full RMF lifecycle for information systems, including categorization, controlselection/implementation, security assessments, authorization packages (e.g., System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Actions and Milestones (POA&Ms)), and achieving/maintaining ATO/IATT approvals.
• Conduct risk and vulnerability assessments, identify threats, and recommend prioritized mitigation strategies to reduce organizational risk.
• Advise senior leadership (e.g., Authorizing Official, Director of IT & Cybersecurity,program managers) on cybersecurity risks, posture changes, resource needs, and security implications of system changes or new technologies.
• Lead continuous monitoring efforts, including vulnerability scanning, configurationmanagement, audit log reviews, and incident detection/response coordination.
• Develop and enforce security policies, ensure compliance with DoD/DISA requirements, and oversee security controls for classified and unclassified systems (e.g., cloud, on-premise, air-gapped).
• Manage and mentor a team of Information System Security Officers (ISSOs), analysts,and support staff; provide training and guidance on security best practices.
• Coordinate security incident response, including detection, analysis, containment,recovery, reporting, and lessons learned.
• Facilitate audits, inspections, and compliance reviews; prepare documentation and evidence for external assessors or authorizing officials.
• Acquire and manage resources (budget, personnel, tools) to support cybersecurityobjectives and embed security into system development lifecycles.
• Stay current with emerging threats, vulnerabilities, technologies, and regulatory changes to proactively adapt security strategies.
• Assist with CMMC lvl2-3 (NIST SP 800-171), and ISO270001 accreditation.
• Assist with other IT & Cybersecurity tasks when needed.

Security Monitoring, Computer Security, Systems Administration/Management, Wheel/Front-End Loader, Buses, Cost Control, Manufacturing Design, High Tech Industry, Hardware Design, Computer Security, * Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field; Master’s degree preferred.

• Active TS/SCI security clearance
• Minimum of 7-10 years of progressive experience in cybersecurity, with at least 3-5 years in an ISSM, senior ISSO, or equivalent leadership role managing information system security in DoD, federal, or classified environments.
• In-depth knowledge of NIST Risk Management Framework (RMF), NIST SP 800-53 controls, DoD Instruction 8510.01, CNSSI 4009, and related standards.
• Proven experience leading ATO processes, preparing accreditation packages, and achieving/maintaining system authorizations.
• Strong understanding of cybersecurity principles, including vulnerability management, incident response, access controls, encryption, network security, and supply chain risk.
• Experience with tools for vulnerability scanning, SIEM, configuration management, and continuous monitoring.
• Excellent leadership, communication, and advisory skills to influence stakeholders at all levels.
• In-depth knowledge of cloud technology such as IaaS, PaaS, and SaaS (e.g. AWS GovCloud, GCP, and Azure)
• Relevant certifications such as:
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CCSP (Certified Cloud Security Professional)
• CompTIA Security+, CGRC (formerly CAP), or equivalent highly desirable
• U.S. citizenship is required

Salary Range: $168,000-$231,000 a year, plus equity., * Shared upside: Receive equity in Apex, letting you benefit from the work you create

• Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost
• Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays
• Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%
• 8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel
• Daily catered lunch and unlimited snacks to keep you fueled throughout the day
• Vibrant community: Monthly office BBQs, pickleball tournaments, run club, and social gatherings for you and your family
• Your dream desk setup and all the tools you need to be your most productive self
• World-class Playa Vista office with EV chargers, with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life
• Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference

Ready to join a team where your contributions matter and your future is bright? Let’s build something extraordinary together.

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.

For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.

Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.

We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet., Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We’re a fast-growing startup backed by $200M in Series D funding, and we invest heavily in our people from day one.