Chief Information Security Officer (CISO)

The role

The CISO will establish enterprise-wide information security ownership across multi-site engineering, manufacturing, and test facilities. This executive leader will own the risk management strategy for unclassified and classified programs and build cybersecurity systems from the ground up.

What you will do

• Define and execute enterprise cybersecurity and information assurance strategy.
• Build, mentor, and inspire a cybersecurity engineering and compliance team.
• Direct advancement and accreditation of CMMC Level 2 / NIST SP 800-171 architecture.
• Lead digital architecture and continuous monitoring of classified information systems.
• Establish an enterprise cyber risk register for executive leadership and the Board.
• Partner with IT, DevOps, and Digital Manufacturing to embed Zero Trust and identity governance.
• Unify technical cyber defenses with physical enclave controls and cleared personnel governance.
• Serve as executive authority for technical and cyber assessments and audits.
• Build public-company-grade cybersecurity governance and incident response playbooks.
• Act as senior escalation authority for incident handling and threat intelligence.

Required qualifications

• 12+ years of progressive experience in cybersecurity, information assurance, and secure systems architecture.
• 5+ years in senior leadership or technical management roles within the Aerospace & Defense (A&D) sector.
• Active U.S. Government Security Clearance (Top Secret required).
• Track record of partnering with FSOs, government Authorizing Officials, and program leadership.
• Mastery of NIST SP 800-171, CMMC Level 2, NIST SP 800-53, RMF, JSIG, and NISPOM.
• Ability to lead hands-on technical initiatives and conduct architectural reviews.
• Experience managing enterprise-wide incident response, EDR, identity federation, and Zero Trust.
• Current industry certification: CISSP, CISM, or equivalent executive-level security credential.

Nice to have

• Active TS/SCI with current SAP/SAR access.
• Experience leading an organization through a DCSA security inspection or C3PAO CMMC Level 2 assessment.
• Practical familiarity with public-company readiness, including SOX compliance and cyber risk disclosures.
• Master’s degree in Cybersecurity, Computer Science, Information Assurance, or related field.

Benefits

• Unlimited PTO - Vacation, Sick, Personal, and Bereavement
• Paid Parental and Adoptive Leave
• Medical, Dental and Vision Insurance
• Tax Advantage Accounts (HSA/FSA)
• Employer Paid Short and Long Term Disability, Basic Life, AD&D
• Additional Benefit Options Including Voluntary Life and Emergency Medical Transport
• EAP Program
• Retirement Savings Plan - 401k with Company Match

Before you apply

• Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents).
• Eligibility to obtain and maintain a U.S. Security Clearance.

About the company

Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion. They design and deliver propulsion and defense systems for national security demands.