Cybersecurity Lead - Information System Security Manager (ISSM)

ABOUT SPHINX Sphinx builds software to solve complex national security problems in Space. Founded by engineers and technologists with deep experience across commercial and defense technology, we were frustrated by the outdated and insecure technology America's service members are forced to rely on. We're here to do better.

We’re focused on building modern, scalable products with an emphasis on using open source technologies. Expect talented, motivated, and interesting colleagues who emphasize collaboration, transparency, and individual responsibility. ABOUT SPHINX Sphinx builds software to solve complex national security problems in Space.

Founded by engineers and technologists with deep experience across commercial and defense technology, we were frustrated by the outdated and insecure technology America's service members are forced to rely on. We're here to do better. We’re focused on building modern, scalable products with an emphasis on using open source technologies.

Expect talented, motivated, and interesting colleagues who emphasize collaboration, transparency, and individual responsibility.

ABOUT THE ROLE

Sphinx is hiring a Cybersecurity Lead/Information System Security Manager (ISSM) to join our growing team and support the delivery of secure software and systems for next-generation space and defense programs. This role is ideal for a cybersecurity professional with deep experience navigating classified environments, managing Risk Management Framework (RMF) activities, and driving successful authorization efforts across complex government systems. The ISSM will lead security and compliance efforts across assigned programs, partner closely with software engineering teams, and coordinate with government stakeholders to achieve and maintain system approvals and accreditations.

Requirements

, maintain compliance, and successfully achieve and sustain authorization across classified environments. In this role, you’ll work closely with Program Leadership, Engineering, DevOps, and government security representatives to build, secure, and sustain systems supporting national security missions.

and accreditation objectives. Managing RMF activities throughout the system lifecycle, including authorization packages, security documentation, assessments, and continuous monitoring activities. Leading cybersecurity compliance efforts and coordinating with engineering, program, and government stakeholders to support successful authorization, accreditation, and ongoing security operations.

into system design and implementation. Preparing, reviewing, and maintaining cybersecurity artifacts, plans, reports, and executive briefings. Supporting security assessments, audits, inspections, and government reviews.

Identifying security risks, vulnerabilities, and compliance gaps while driving effective mitigation strategies. Coordinating cybersecurity incident response activities, including investigation, containment, remediation, reporting, and communication with internal stakeholders, customers, and government representatives as required. Collaborating with government Authorizing Officials (AOs), Security Control Assessors (SCAs), and customer security representatives to obtain and maintain system authorizations.

Contributing to the development and improvement of cybersecurity policies, processes, and best practices across the organization.

, threats, and industry best practices impacting classified environments. You might be a good fit if you: Have 7+ years of experience in cybersecurity, information assurance, information system security, RMF, or related security disciplines.