Cybersecurity Administrator II - CUI

The future of aerospace and defense starts here. Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands. We are bringing a new model to space access: one in which every link in an enormous value chain isn’t limited by those around it. We design rocket engines and propulsion solutions. Our products and technologies require an extraordinary team. A team that will ensure the security of tomorrow’s technologies while deploying today’s best. We are an intrinsically motivated team with a passion for solving problems and empowering each other every day to develop our skills, knowing that there is always room for growth. The Cybersecurity Administrator II is a technical leadership role responsible for overseeing the organization’s cybersecurity strategy with a primary focus on risk mitigation for Controlled Unclassified Information (CUI). This position involves managing advanced security infrastructure, conducting high-level risk assessments, and leading the implementation of security policies to ensure compliance with federal regulations such as NIST SP 800-171 and CMMC. The Administrator will collaborate with stakeholders to reduce the probability of a material impact due to a cyber event, specifically targeting the protection of sensitive data flows. Responsibilities: Risk Mitigation & CUI Oversight Identify and Prioritize Risks: Conduct high-level risk assessments and threat modeling specifically focused on the protection of CUI and Federal Contract Information (FCI). Develop Mitigation Strategies: Oversee the implementation and advancement of comprehensive risk mitigation strategies to ensure data integrity and confidentiality at the CUI level. Data Flow Analysis: Work with stakeholders and external vendors to ensure risk management and CUI handling protocols are embedded in all applicable organizational processes and systems. Technical Controls: Establish and enforce advanced security policies and protocols across the organization to meet stringent federal data protection standards. Security & Compliance Management Infrastructure Optimization: Manage and optimize security infrastructure, including firewalls, IDS/IPS, and SIEM systems, ensuring they are tuned to detect threats against sensitive data environments. Federal Compliance Leadership: Lead the technical implementation of compliance programs to adhere to CMMC, NIST (800-171/800-53), FISMA, and FedRAMP. Documentation & Auditing: Develop and maintain critical documentation, including System Security Plans (SSPs), Risk Assessment Reports (RARs), and Plan of Action and Milestones (POA&M) specifically for CUI-governed systems. Audit Readiness: Oversee regular compliance audits and assessments, ensuring all findings related to CUI protection are addressed promptly. Incident Response & Mentorship Directed Response: Lead the development of incident response plans and manage efforts for cybersecurity incidents, ensuring effective containment and recovery of impacted CUI assets. Post-Incident Analysis: Conduct detailed post-incident analysis to extract lessons learned and improve future risk mitigation strategies. Training and Awareness: Develop and lead cybersecurity training programs for employees and junior staff, focusing on proper CUI handling and compliance requirements. Other duties as assigned. Qualifications: Education & Experience: Minimum of 5-7 years of experience in cybersecurity, with a heavy focus on risk management and federal data protection. An equivalent combination of a Master’s degree with 1-3 years of experience, or a Bachelor’s degree with 3-5 years of experience is acceptable. Regulatory Expertise: Extensive experience working with government contracts and a deep understanding of federal cybersecurity regulatio