Information Systems Security Manager

Houston, TX

Intuitive Machines is an innovative and cutting‑edge space company making cislunar space accessible to both public and private customers. Our mission is to further science and exploration, communications, and economic progress from the Earth to the Moon and beyond. With multiple NASA lunar missions in development and additional private missions on our manifest, we pride ourselves in supporting NASA, our customers, and the nation in paving the way to return humans to the surface of the Moon. Our world‑class team includes experts in all aspects of spacecraft subsystems design, development, and test, on‑orbit operations, and safety.

About the Position

We are currently seeking an Information Assurance Manager (IAM) / Information Systems Security Manager (ISSM) based in our Houston, TX office. In this role you will be responsible for a portfolio of classified programs covering Collateral and Sensitive Compartmented Information (SCI). You will support information system full life‑cycle activities including scoping information systems for new programs, preparing accreditation/certification packages in accordance with relevant regulations and standards, maintenance and monitoring of operational systems, system upgrades and feature additions during program execution, and system de‑commission and de‑certification activities.

Responsibilities

• Ensure Information System compliance across multiple business areas or programs and that system security measures meet applicable government policies.
• Provide configuration management and accurately assess the impact of modifications and vulnerabilities for each system.
• Maintain a thorough understanding of NIST SP 800‑53 controls, determine applicable controls, and document implementation in the Security Controls Traceability Matrix (SCTM).
• Monitor and resolve Plan of Action and Milestones (POA&M) to mitigate system vulnerabilities on assigned Information Systems.
• Communicate and coordinate Information Systems Security policy across the organization and work with government agencies to obtain rulings, interpretations, and acceptable deviations for compliance.
• Establish, document, implement, and monitor the IS Security Program and related procedures for the facility, ensuring compliance with IS security requirements.
• Prepare and maintain Systems Security Plans (SSP) that accurately reflect the installation and security provisions of the system.
• Verify that each SSP is implemented, that specified security controls are in place and properly tested, and that the IS functions as described.
• Evaluate proposed changes or additions to the SSP and collaborate with customers for system approvals.
• Conduct ongoing security reviews and tests for information systems to verify that security features and operating controls are functional and effective.
• Ensure periodic self‑inspections of the facility’s IS Program are conducted as part of the overall facility self‑inspection program.
• Develop, document, and present IS security education, awareness, and training activities for facility management, IS personnel, users, and others as appropriate.
• Ensure personnel are trained on the IS’s prescribed security restrictions and safeguards before they are initially allowed to access a system.
• Report compliance metrics to government CSA, Program Management, and the Information System Owner.
• Manage, lead, and provide security guidance and mentoring to a team of security professionals.
• Oversee and coordinate insider threat program activities for assigned information systems in collaboration with the Insider Threat Program Manager.
• Ensure proper media sanitization, destruction, and accountability procedures for classified storage devices and system components throughout the system lifecycle and during decommissioning.
• Coordinate security incident response activities for assigned systems, including timely reporting to appropriate government agencies (DCSA, NSA, etc.) and internal stakeholders.
• Oversee physical security integration with IS security requirements, ensuring coordination with facility security personnel.
• Manage COMSEC material accountability and cryptographic key management for assigned systems as applicable.
• Ensure compliance with TEMPEST/EMSEC requirements for SCI‑level systems as applicable.

Requirements

• U.S. citizen with Active TS/SCI clearance and CI Polygraph.
• Experience as an ISSM/ISSO implementing NISPOM Chapter 8, ICD 503, and/or JSIG IS requirements in an SAP/SCI environment.
• CISSP and CISM certifications.
• Ability to obtain GSLC certification within 6 months of hire.
• Bachelor of Science degree.
• Eight (8) years of related IT security experience.
• Minimum of 2 years of related IT or security experience in a classified (SCI) environment.
• Hands‑on experience with SIEM tools (Splunk, Elastic, or similar) for log analysis and security event correlation.
• Knowledge of Information Security or Information Technology standards.
• Experience with Risk Management Framework (RMF), including participation in assessment and authorization activities.
• Experience conducting security audits and vulnerability assessments in operational classified systems.
• DoD Directive (DoDD) 8140 / 8570 certification requirements (CompTIA Security+ CE or equivalent certification).
• Experience coordinating with government assessment teams (DCSA, NSA, Program Security Officers).

Preferred Requirements

• Familiarity with implementation of government directives and policies derived from NIST, CNSSI, ICD, DoD, or other government regulatory compliance standards within a professional industry.
• Experience with information security tools including audit reduction, vulnerability management, change detection, and network monitoring (e.g., ACAS, Nessus, HBSS, Splunk, RedSeal, Tripwire, DISA SCC and STIG Viewer).
• Experience developing IS security plans, policy, and procedures for LAN and WAN information systems.
• Experience with both Windows and Linux operating environments.
• Previous leadership experience.
• Experience managing security incidents and coordinating response activities in classified environments.
• Knowledge of DevSecOps practices and secure software development lifecycle in classified systems.
• Experience with insider threat detection tools and procedures.