Sr. Cyber Assurance Analyst, Launch

• Lead and support security audits and certification (NIST 800-171, NIST 800-53, ISO 27001, etc.) efforts.

• Partner with engineers to gather and validate technical evidence (configs, code snippets, logs, system designs, etc).

• Perform technical security and risk assessments of systems and networks within our environment and identify where they deviate from security policy, standards or regulations.

• Identify security control and compliance gaps, advise on remediation, and drive timely resolution with engineers.

• Maintain necessary documentation of controls, processes and audits.

• Identify and drive assessments and audit efficiency through system integration, data utilization, and process improvement.

• Support third-party risk management efforts including supplier onboarding and periodic cyber assessments.

• Identify and propose business enabling actions by maintaining an up-to-date understanding of emerging trends in information security risks, changes in standards, and new compliance/assurance techniques and trends.

• Mentor fellow teammates and take an active role in their development.

• High school diploma or equivalency certificate.

• 5+ years of experience in cybersecurity compliance, audit or technical security roles with strong knowledge in security compliance frameworks.

• 5+ years of experience with control testing, security standards/policy development, security audits, or security risk management.

• Ability to interpret code/configurations and analyze system/network designs for compliance implications.

• Experience with security tooling such as vulnerability scanners, SIEMS, container security, system configuration baseline checks (e.g. CIS Benchmarks, STIGs, etc.).

• Demonstrated experience partnering with and preparing information system owners for internal assessments, facilitating and leading external audits, and driving gaps and findings to closure in a collaborative manner.

• Strong understanding of security program and control frameworks, assessment methodologies, and practices, i.e. NIST RMF, NIST CSF, ISO-27001, 800-53(a), 800-171(a), CMMC, CNSSI 1253, 800-137, PCI, HIPAA, GDPR, etc.

• Experience evaluating third-party risk, communicating with external stakeholders, and supporting appropriate mitigations.

• Strong communication skills across all organizational levels and ability to build cross-organizational coalitions.

• Direct experience with external audits, regulatory compliance reviews and examinations.

• Project and program management experience, tooling integration, and delivery in highly fluid environments.

• Processional certifications such as CISA, CISM, CISSP, GSNA, ISO 27001 auditor, PCI ISA or QSA, or equivalent certifications.

• Must be willing to travel ( < 25%) domestically and internationally in support of audit and other assurance activities.

• Must be willing to work extended hours and/or weekends as needed.

• This role requires you to be onsite, remote/hybrid work will not be considered.

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here .

SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to EEOCompliance@spacex.com .