Associate Director, Information Systems Security

Company Overview

Iridium is an award-winning satellite communications company operating the world's only truly global voice and data network, delivering reliable connectivity anywhere on Earth. For more than 20 years, Iridium has powered mission-critical communications for governments, businesses, aviation, maritime, and the rapidly expanding Internet of Things.

Now part of Iridium, Aireon is the world’s only space-based air traffic surveillance system, providing real-time visibility of aircraft over oceans, the poles, and remote regions. Together, Iridium and Aireon are helping build a safer, more connected, and more efficient future for global aviation.

Join our team and help shape how the world stays connected. We foster a collaborative, inclusive culture where employees are empowered to innovate, grow professionally, and make a meaningful impact.

##

What We’re Looking For:

The Associate Director of Information Systems Security is responsible for the oversight and operational implementation of Aireon’s Information and Cyber Security programs. Reporting to the Director of IT Security and operating under the authority of Aireon’s Accountable Executive, this role owns the execution, performance, and continuous improvement of Aireon’s ATS Information Security Management System (ATS‑ISMS) as defined in the ATS‑ISMM, ensuring compliance with EASA Part‑IS.

Serving as Aireon’s operational focal point for information security across Engineering and Operations, this role translates executive security objectives into practical, measurable, and effective operational practices that protect the confidentiality, integrity, and availability of systems essential to global aviation safety.

What You’ll Do:

• Own and operate Aireon’s ATS Information Security Management System (ATS‑ISMS), ensuring all policies, processes, and controls remain compliant with EASA Part‑IS

• Manage and oversee personnel responsible for ATS‑ISMS activities, ensuring appropriate staffing, competency management, training, and performance oversight consistent with EASA Part‑IS requirements.

• Lead workforce planning and capability development efforts to maintain an effective security function capable of meeting evolving operational, regulatory, and cybersecurity demands.

• Lead information security risk management activities, including structured risk assessments, development of Risk Treatment Plans (RTPs), and facilitation of residual risk acceptance in coordination with the CISO and Accountable Manager

• Direct the Cyber Security Incident Response Team (CSIRT) across the full incident lifecycle: detection, triage, containment, eradication, recovery, and lessons learned

• Manage Aireon’s response to findings from competent authorities (EASA and others), driving corrective action plans (CAPs) through timely and effective closure