Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days ago

Chief Information Security Officer (CISO)

Ursa Major133 open roles

Where
Longmont, Colorado
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowChief Information Security Officer (CISO)Ursa Major · Longmont, Colorado

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Ursa Major's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Ursa Major postings stay open a median of 42 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 3 days ago

Ursa Major median: 42 days open

The posting

The future of aerospace and defense starts here.

Ursa Major was founded to revolutionize how America and its allies access and apply high-performance propulsion, from hypersonics to solid rocket motors, satellite maneuvering and launch. We design and deliver propulsion and defense systems that solve the most urgent and critical national security demands.

Our mission requires an extraordinary team, specifically one that will mold tomorrow's critical technologies while deploying today's best. We are an intrinsically motivated organization with a passion for solving complex technical problems and empowering each other every day, knowing that there is always room for growth.

About The Role

Ursa Major is seeking an executive technology leader to serve as our Chief Information Security Officer (CISO w/ clearance). Reporting to the executive leadership team, the CISO will establish enterprise-wide information security ownership across our multi-site engineering, manufacturing, and test facilities. Working in direct, strategic lockstep with our Facility Security Officer (FSO), who leads personnel clearances, physical security, and overall NISPOM facility compliance, the CISO serves as the ultimate authority for digital, technical, and operational cybersecurity.

We are not looking for an administrator who leads from behind a desk or relies on enterprise bureaucracy. We need a builder who leads from the front—an executive with deep roots in Aerospace & Defense (A&D) who knows what mature security infrastructure looks like and possesses the hands-on drive to build, scale, and mature our systems from the ground up.

Sitting at the intersection of defense compliance, manufacturing velocity, and enterprise IT, you will own the overarching risk management strategy for both unclassified and classified programs. You will champion our hybrid CMMC Level 2 enclave expansion, govern the technical architecture of classified defense enclaves (Secret / SAP), protect critical Intellectual Property, and establish the cyber risk governance required for a high-growth defense firm preparing for public-company operations.

Responsibilities:

  • Define and execute Ursa Major’s enterprise cybersecurity and information assurance strategy across all corporate, manufacturing, engineering, and classified program environments.
  • Lead from the front to build, mentor, and inspire a world-class cybersecurity engineering and compliance team, fostering a culture of operational enablement, technical rigor, and deep cross-functional partnership.
  • Direct the continuous advancement and accreditation of our CMMC Level 2 / NIST SP 800-171 architecture, ensuring Controlled Unclassified Information (CUI) and defense technical data flow securely across multi-site operations without impeding engineering velocity.
  • In close partnership with the FSO and program security, lead the digital architecture, technical authorization packages, and continuous monitoring of classified information systems (Secret, Top Secret, and Special Access Programs) in strict alignment with RMF, JSIG, NIST SP 800-53, and DCSA standards.
  • Establish an enterprise cyber risk register, translating technical vulnerabilities into clear operational and business risk metrics for executive leadership and the Board of Directors.
  • Partner closely with IT, DevOps, and Digital Manufacturing to embed Zero Trust network segmentation, identity governance (Entra ID), and robust endpoint detection into physical shop floors, test stands, and cloud environments.
  • Establish a collaborative, locked-in operating rhythm with the FSO and physical security teams to unify technical cyber defenses with physical enclave controls, COMSEC, and cleared personnel governance.
  • Serve as the executive authority for technical and cyber assessments, partnering with the FSO on DCSA security reviews, customer audits, DCMA evaluations, and third-party CMMC assessments (C3PAO).
  • Build public-company-grade cybersecurity governance, including incident response playbooks, third-party vendor risk management (TPRM), SEC disclosure readiness, and SOX IT General Controls (ITGC).
  • Act as the senior escalation authority for incident handling, crisis communications, threat intelligence integration, and technical remediation.

Minimum Qualifications:

  • 12+ years of progressive experience in cybersecurity, information assurance, and secure systems architecture, with at least 5+ years in senior leadership or technical management roles within the Aerospace & Defense (A&D) sector.
  • Active U.S. Government Security Clearance (Top Secret required, with active or recent SCI/SAP eligibility preferred).
  • Demonstrated track record of partnering successfully with Facility Security Officers (FSOs), government Authorizing Officials (AOs), and program leadership to secure facility authorizations and system ATOs.
  • Deep technical and regulatory mastery of federal security standards, including NIST SP 800-171, CMMC Level 2, NIST SP 800-53, Risk Management Framework (RMF), JSIG, and NISPOM.
  • Demonstrated ability to lead hands-on technical initiatives, conduct rigorous architectural reviews with engineering teams, and articulate strategic risk and vision to executive leadership and government customers.
  • Experience managing enterprise-wide incident response, endpoint detection (EDR), identity federation, and Zero Trust micro-segmentation in hybrid IT/OT manufacturing environments.
  • Current industry certification: CISSP, CISM, or equivalent executive-level security credential.

Preferred Qualifications:

  • Active TS/SCI with current SAP/SAR access.
  • Experience leading an organization through a successful DCSA security inspection or C3PAO CMMC Level 2 assessment.
  • Practical familiarity with public-company readiness, including SOX compliance, cyber risk disclosures, and enterprise business continuity planning.
  • Master’s degree in Cybersecurity, Computer Science, Information Assurance, or related field.

Colorado law requires us to tell you the base compensation range of this role, which is $240,000 - $300,000, determined by your education, experience, knowledge, skills, and abilities. What we can’t quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy.

Classification: Full-time Exempt

Benefits Include: (Please note, Interns are not eligible for benefits)

  • Unlimited PTO - Vacation, Sick, Personal, and Bereavement
  • Paid Parental and Adoptive Leave
  • Medical, Dental and Vision Insurance
  • Tax Advantage Accounts (HSA/FSA)
  • Employer Paid Short and Long Term Disability, Basic Life, AD&D
  • Additional Benefit Options Including Voluntary Life and Emergency Medical Transport
  • EAP Program
  • Retirement Savings Plan - 401k with Company Match

How To Apply: Interested candidates are encouraged to apply by filling out the application below and clicking "Submit Application". This position will be posted for a minimum of 3 days and will remain open until filled or adjusted based on the volume of applicants.

NOTE: Research suggests that women and BIPOC individuals may self-select out of opportunities if they don't meet 100% of the job requirements. We encourage anyone who believes they have the skills and the drive necessary to succeed here to apply for this role.

Must be a U.S. Person (this includes U.S. Citizens and Permanent Residents).

Eligibility to obtain and maintain a U.S. Security Clearance.

We’re an equal-opportunity employer. You will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.

No outside recruiters, please.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Ursa Major's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Ursa Major's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Ursa Major's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.