Information Systems Security Manager (ISSM)

Information Systems Security Manager (ISSM) San Diego, CAOperationsIn officeFull-timeWe are looking for a highly skilled and motivated Information Systems Security Manager (ISSM) to join our team onsite at our San Diego office. Reporting to the Director of Operations, you will be at the forefront of developing, implementing, and upholding our company's digital security compliance strategy and information security, ensuring compliance with stringent government regulations and standards. Your expertise will be crucial in protecting our sensitive data, managing risks, and ensuring that our operations meet all required cybersecurity maturity models and information control protocols. With expertise in NIST, DFARS, ISO 27001, and classified information management, you will play a key role in securing our operations and maintaining compliance with defense industry requirements. If you’re passionate about safeguarding critical data and upholding the highest standards of security, we’d love for you to join us at Firestorm.What You’ll Do  

• Develop, implement, and maintain the company's information security policies, standards, and procedures to ensure compliance with NIST SP 800-171, DFARS 252.204-7012, and other relevant regulations. 
• Lead efforts to achieve and maintain compliance with CMMC and ISO 27001, including coordinating certification processes and managing ongoing audits. 
• Oversee the protection of Controlled Unclassified Information (CUI) and other controlled information. 
• Implement and oversee procedures for handling classified information, ensuring compliance with all applicable government regulations and directives. 
• Conduct regular risk assessments and vulnerability analyses to identify and mitigate potential security threats, including those related to classified information systems. 
• Coordinate with internal teams to integrate security controls into all aspects of operations, including product development and supply chain management. 
• Serve as the primary liaison with government agencies and customers regarding information security compliance, and reporting. 
• Develop and manage the incident response plan, leading investigations and remediation efforts, in the event of security breaches or incidents involving classified or sensitive information. 
• Provide training and awareness programs to educate employees on information security policies, procedures, best practices, and the handling of classified information. 
• Stay current with evolving regulatory requirements, emerging threats, and industry best practices to continuously improve the company's security posture. 
• Collaborate with our DevSecOps team on the design, implementation and maintenance of cATO (continuous Authority to Operate) pipelines. 
• Collaborate with IT and engineering teams to ensure secure system architectures and data protection mechanisms are in place, especially for systems processing classified information. 
• Must be willing to travel up to 10%

  Required Qualifications 

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related field; relevant experience may be substituted in lieu of a degree
• U.S. Citizenship required due to ITAR regulations, with the ability to obtain and maintain a DoD security clearance
• 7+ years of experience in information security management, with at least 3 years in a leadership role. 
• Extensive knowledge of NIST SP 800-171, NIST SP 800-53, DISA-STIGS, DFARS 252.204-7012, ISO 27001, CUI handling requirements, and classified information security protocols. 
• Proven experience in developing and implementing information security programs and achieving compliance with regulatory standards. 
• Strong understanding of risk management principles and experience conducting risk assessments and vulnerability management, including in classified environments. 
• Experience with incident response planning and execution, particularly concerning classified information. 
• Familiarity with data protection laws and regulations. 
• Excellent communication skills, with the ability to articulate complex security requirements to technical and non-technical stakeholders. 

  Preferred Qualifications  

• Professional certifications such as CISSP, Security+, CISM, CISA or other DoD Approved 8570 Baseline Certification in the Information Assurance Management (IAM) Level III category. 
• Defense or aerospace industry experience a plus. 
• Familiarity with cybersecurity maturity models like CMMC (Cybersecurity Maturity Model Certification). 
• Experience with security audit processes and interfacing with regulatory auditors. 
• Experience with informing design and implementation cATO pipelines. 
• Experience with classified information systems (e.g., Joint Worldwide Intelligence Communications System - JWICS, Secret Internet Protocol Router Network - SIPRNet).
• Experience with Special Access Programs (SAP) and Sensitive Compartmented Information (SCI).
• Knowledge of cloud security principles and experience securing cloud environments handling classified or sensitive data. 

 About Firestorm Firestorm is a California-headquartered defense-tech company building expeditionary advanced manufacturing systems (xCell), Group 1-3 modular Uncrewed Aircraft Systems (Tempest), and Group 1 quadcopter Uncrewed Aircraft Systems (Squall, produced via the xCell manufacturing platform). We are 150 employees, Series B, and growing the Mission Success function from the ground up to deliver white-glove fielding, sustainment, and customer success for the operators who decide vendor credibility in the first 72 hours of operational use. Our Mission Success function is Warfighter First, Led by Warfighters — the team that fields the system is the team that fielded systems like it.Work Environment

• Position is based onsite at our San Diego, CA headquarters
• We welcome candidates who are local or open to relocating; relocation assistance is available and may be included in the offer package where appropriate.
• Willingness and ability to travel up to 10% for seminars

 Compensation 

• Base salary: $140,000 - $180,000 base, commensurate with experience
• Equity: Meaningful equity grant in a growth-stage defense technology company

 The posted salary range reflects an estimate based on a variety of compensation factors, including but not limited to relevant experience, education, certifications, specialized skills, geographic location, and business needs. Actual compensation may vary, and this range is subject to change as our compensation structure or market conditions evolve.Benefits & Perks Our culture fosters collaboration, respect, and trust, empowering passionate people to do their best work. We offer a competitive salary, comprehensive benefits, and opportunities for career growth. In addition to an opportunity to take part in an innovative, collaborative and fast-growing business with a highly motivated and skilled team, we also take pride in taking care of our employees. Here are just a few ways that we show our appreciation: 

• We offer comprehensive medical, dental, and visions plans
• 401(k) Retirement Savings Plan to invest in your long-term retirement goals
• Equity grants for new hires
• Unlimited PTO
• Extremely generous company holiday calendar, including holiday hiatuses in July & December.
• Generous Parental Leave 
• Lifestyle Spending Account
• FSA 
• DCFSA
• HSA
• Hospital Indemnity insurance 
• Critical Illness insurance 
• Accident insurance 
• Basic Life/AD&D, short-term and long-term disability insurance, 100% covered by Firestorm. Plus, the option to purchase additional life insurance for you and your family.
• Mental Health Resources: We provide free mental health resources 24/7 including therapy and more. Additional work-life services, such as free legal and financial support, are available to you as well. 

 Export Control Compliance To conform to U.S. government export control regulations, including the International Traffic in Arms Regulations (ITAR) and Export Administration Regulations (EAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or otherwise eligible to obtain the required authorizations from the U.S. Department of State or U.S. Department of Commerce. Equal Opportunity Statement Firestorm is an equal opportunity employer, committed to creating a diverse and inclusive workplace, and upholding equitable hiring practices. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic under federal, state, or local law, including those with a criminal history, in a manner consistent with the requirements of applicable state and local laws, including the CA Fair Chance Initiative for Hiring Ordinance. We actively encourage members of recognized minorities, women, Veterans, and those with disabilities to apply, and we work to create a welcoming and supportive environment for all applicants throughout the interview process. Firestorm is committed to fostering an inclusive and accessible work environment. If you require accommodations or assistance during the application process, please don’t hesitate to reach out to us at careers@launchfirestorm.com so we can provide the support you need.  
Ready to apply?Powered byFirst name *Last name *Email *LinkedIn URLPhone number *Location *Resume *Click to upload or drag and drop hereCover letterClick to upload or drag and drop hereAre you authorized to work in the United States? *U.S. Work AuthorizationAre you any of the following “protected individual(s)” as defined in the Immigration and Naturalization Act, 8 U.S.C. 1324b(a)(3)? *EXPORT CONTROLS - This position requires access to information and technology that is subject to U.S. export controls. Your responses to the questions below will be used solely to determine your eligibility under U.S. law to receive information and materials subject to U.S. export controls.Are you a U.S. Citizen who can obtain & maintain a Security Clearance? *Do you presently hold an active U.S. security clearance, or are you eligible to obtain and maintain a U.S. security clearance? *Clearance Eligibility - This position requires eligibility to obtain and maintain a U.S. security clearanceDo you have Microsoft Entra ID in cloud-only environments, including account setup, groups, and access troubleshooting *Do you have experience supporting MacOS and Linux (Ubuntu preferred) in managed environments *Voluntary Self-IdentificationTo comply with government reporting requirements, we invite candidates to participate in the self-identification survey below. Your completion of this form is entirely optional, and your decision will neither influence the hiring process nor any subsequent stages. Any information you choose to share will be kept confidential and stored in a secure file. As outlined in our Equal Employment Opportunity policy, we uphold a commitment to non-discrimination based on any protected group status specified in applicable laws.GenderRaceRace and ethnicity descriptionsVoluntary Self-Identification of Veteran StatusVEVRAA requires Government contractors to take affirmative action to employ and advance in employment protected veterans. To help us measure the effectiveness of our outreach and recruitment efforts of veterans, we are asking you to tell us if you are a veteran covered by VEVRAA. If you believe that you belong to any of the following categories of protected veterans, please indicate by making the appropriate selection.Veteran status descriptionsDisabled veteranA veteran who served on active duty in the U.S. military and is entitled to disability compensation (or who but for the receipt of military retired pay would be entitled to disability compensation) under laws administered by the Secretary of Veterans Affairs, or was discharged or released from active duty because of a service-connected disabilityRecently separated veteranA veteran separated during the three-year period beginning on the date of the veteran's discharge or release from active duty in the U.S military, ground, naval, or air serviceActive duty wartime or campaign badge veteranA veteran who served on active duty in the U.S. military during a war, or in a campaign or expedition for which a campaign badge was authorized under the laws administered by the Department of DefenseArmed Forces service medal veteranA veteran who, while serving on active duty in the U.S. military ground, naval, or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985 (61 Fed. Reg. 1209).Veteran status Voluntary Self-Identification of Disability StatusForm CC-305OMB Control Number 1250-0005Page 1 of 1Expires 04/30/2026We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.Disability descriptionsA disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

• Alcohol or other substance use disorder (not currently using drugs illegally)
• Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
• Blind or low vision
• Cancer (past or present)
• Cardiovascular or heart disease
• Celiac disease
• Cerebral palsy
• Deaf or serious difficulty hearing
• Diabetes
• Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
• Epilepsy or other seizure disorder
• Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
• Intellectual or developmental disability
• Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
• Missing limbs or partially missing limbs
• Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
• Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
• Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
• Partial or complete paralysis (any cause)
• Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
• Short stature (dwarfism)
• Traumatic brain injury

Disability statusPUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.Req ID: R271