Director, Cybersecurity

Be more than just an employee number! Join Terran Orbital, a leader in innovation, manufacturing, and operations in the satellite industry. We are a pioneer in the miniaturization of space technologies and the delivery of responsive space solutions. We are a unique, fast-growing, and trusted team focused on quickly and economically designing, building, launching, and operating state-of-the-art satellites for advanced mission constellations.

Terran Orbital is seeking an experienced Director of Cybersecurity to join our growing team. The Director of Cybersecurity will be responsible for overseeing and enhancing the overall security posture and networking infrastructure of the organization. This position requires a deep understanding of cybersecurity, compliance frameworks such as CMMC v2, NIST, and the ability to develop and implement effective security policies.

Key Duties and Responsibilities

1. Cybersecurity Leadership:
1. Develop and execute a comprehensive cybersecurity strategy in alignment with business objectives.
2. Stay abreast of the latest cyber threats, vulnerabilities, and industry best practices to ensure proactive security measures.
2. CMMC v2 Compliance:
1. Lead the organization's efforts in achieving and maintaining compliance with CMMC v2 requirements.
2. Collaborate with cross-functional teams to implement and monitor controls necessary for CMMC compliance.
3. NIST Framework:
1. Apply and enforce NIST cybersecurity framework principles throughout the organization.
2. Conduct regular risk assessments and implement mitigation strategies based on NIST guidelines.
4. Policy Development and Enforcement:
1. Develop, implement, and manage cybersecurity policies and procedures to ensure the confidentiality, integrity, and availability of information assets.
2. Ensure all employees are trained on and adhere to established cybersecurity policies.
5. Incident Response and Investigation:
1. Develop and maintain an incident response plan, including coordination with relevant stakeholders.
2. Conduct investigations into security incidents, breaches, and vulnerabilities, providing recommendations for improvements.
6. Vendor Management:
1. Evaluate and manage cybersecurity vendors to ensure their products and services align with the organization's security requirements.
2. Establish and maintain strong relationships with external partners and vendors.
7. Threat Intelligence and Monitoring:
1. Threat Intelligence: Establish and maintain a threat intelligence program to proactively identify and mitigate emerging threats.
2. Continuous Monitoring: Implement advanced monitoring tools and techniques to continuously monitor the organization's network for suspicious activities.
8. Data Protection and Privacy:
1. Data Governance: Develop and enforce data protection policies to ensure compliance with data privacy regulations such as GDPR, CCPA, etc.
2. Encryption Standards: Ensure the implementation of robust encryption standards for data at rest and in transit.
9. Business Continuity and Disaster Recovery:
1. BC/DR Planning: Develop and maintain business continuity and disaster recovery plans to ensure the organization can quickly recover from cyber incidents.
2. Regular Testing: Conduct regular drills and simulations to test the effectiveness of BC/DR plans.
10. Security Awareness and Training:
1. Security Culture: Foster a culture of security awareness across the organization through regular training and awareness programs.
2. Phishing Simulations: Conduct periodic phishing simulations to test and improve employee awareness and response to phishing attacks.

1. Regulatory Compliance and Audits:
1. Audit Management: Coordinate and manage internal and external cybersecurity audits to ensure compliance with regulatory requirements.
2. Regulatory Updates: Stay informed about changes in cybersecurity regulations and ensure the organization adapts to maintain compliance.

1. Collaboration with Network Engineering:
1. Advisory Role: Work closely with the Senior Network Engineer to ensure that network security measures are aligned with overall cybersecurity strategy.
2. Security Integration: Provide guidance on integrating security best practices into network design, implementation, and maintenance.
3. Joint Initiatives: Collaborate on joint initiatives to enhance network security, such as implementing zero-trust architecture and advanced threat detection systems.

Requirements

• Bachelor's or Master's degree in Cybersecurity, Information Technology, or related field.
• Proven experience (8-10 years) in a leadership role within cybersecurity and networking.
• In-depth knowledge of CMMC v2, NIST, and other relevant compliance frameworks.
• Strong understanding of networking protocols, architecture, and infrastructure.
• Excellent communication skills and the ability to convey complex technical concepts to non-technical stakeholders.
• Must be able to obtain a TS/SCI level security clearance.
• Relevant certifications such as CISSP, CISM, or CCNP are preferred.

Benefits

• 100% Company-paid comprehensive medical, dental, and vision coverage for you and your dependents
• 401(k) Match
• Flexible Time Off (FTO)

Salary Range $160,000-$200,000

Your actual level and base salary will be determined case-by-case and may vary based on the job-related qualification, knowledge, skills, education, and experience. In addition to base salary, we offer 100% covered medical, dental, and vision coverage, a 401(k) match, unlimited flex time off, covered life insurance, maternity and paternity leave, tuition reimbursement, employee referrals, and lots of swag!

About Terran Orbital

Terran Orbital is a leading manufacturer of satellite products primarily serving the aerospace and defense industries. Terran Orbital provides end-to-end satellite solutions by combining satellite design, production, launch planning, mission operations, and on-orbit support to meet the needs of the most demanding military, civil, and commercial customers. Learn more at www.terranorbital.com

Physical Demands

An employee must meet the physical demands described to perform the essential functions of this job successfully. In performing the duties of this job, the employee is routinely required to sit or stand for long durations of time, in addition to bending, reaching, and walking. This would require the ability to lift or move objects up to 10 pounds and occasionally lift or move objects up to 25 pounds. This position is generally sedentary, with substantial computer usage.

Work Environment

The job operates in a professional office environment but in a manufacturing company. This job routinely uses standard office equipment such as computers, phones, photocopiers, and scanners.

Disclaimers

To comply with U.S. Government space technology export regulations, the applicant must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. In addition, please note that this position may require a current United States National Security clearance or eligibility for such a clearance.

Terran Orbital is an Equal Opportunity/Affirmative Action Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, or membership in any other group protected by federal, state, or local law.

If you need assistance or accommodation due to a disability, you may contact us at hr@terranorbital.com.

Terran Orbital does not accept unsolicited resumes from recruiters, employment agencies, or staffing firms. To conduct business with Terran Orbital, a Master Services Agreement (MSA) must be executed and confirmed prior to submitting any information relating to a potential candidate. Without a signed MSA, Terran Orbital shall not be responsible to any individual or entity for any payment relating to any form of fee or compensation.

And, in the event that a resume or candidate is submitted by a recruiter, an employment agency, or a staffing firm without a fully executed MSA, Terran Orbital has the unrestricted right to pursue and hire any of those candidate(s) without any legal or financial responsibility to the recruiter, agency, and/or firm.