Cybersecurity GRC Engineer III

Application close date:
Applications will be accepted on an ongoing basis until the requisition is closed.

At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight!

This role is part of Enterprise Technology (ET), where we’re developing the digital infrastructure needed to build the road to space, with an emphasis on digital capabilities required to advance Blue Origin’s mission. Enterprise Technology is the center of excellence for digital technology at Blue Origin, providing oversight and governance to align technology and business strategies.

As part of a passionate and accomplished team of Cyber Security experts, you will protect and secure the infrastructure supporting various corporate and spaceflight systems. We are looking for someone to apply their technical expertise, leadership skills, and commitment to quality to positively impact safe human spaceflight. Passion for our mission and vision is required!

We are looking to radically reduce the cost of security compliance, which will require creative genius and technical aptitude. Responsibilities include but are not limited to:

- Automate compliance workflows including artifacts collection for external audits, internal security compliance reviews, and continuous monitoring tasks.
- Create GRC dashboards that integrate data from existing observability solutions and can be used to drive data-driven decisions.
- Use outcome-driven metrics and key performance indicators to measure controls effectiveness, compliance burden, and drive improvements and efficiencies.
- Identify manually-intensive processes that can be automated and develop, test, deploy, and maintain automated GRC solutions.
- Support risk assessments to identify potential threats and vulnerabilities across the organization, analyzing their impact and likelihood of occurrence.
- Support policies and procedures maintenance aligned with in-scope security frameworks, regulations, and internal standards to manage identified risks effectively.

Minimum Qualifications:

- Bachelor's degree or certification in cybersecurity, or equivalent industry experience
- Experience with cybersecurity standards including NIST, ISO 27001, ISO 28000, SOC, and privacy frameworks
- Experience with 3rd party information security audits including CMMC and ISO
- 6+ years experience in information security risk management
- Experience with security compliance and vulnerability scanning technologies and enterprise observability technologies
- Expertise in cloud native capabilities, business IT, and OT/safety-critical technologies
- Knowledgeable of security strategies and practices within the manufacturing industry
- Ability to earn trust, maintain positive and professional relationships, and contribute to a culture of inclusion

Preferred Qualifications:

- Experience in the aerospace and/or manufacturing industries
- Experience with AI security

Base Pay Range for:
WA applicants is $130,706.00 - $182,987.70

Other site ranges may differ

Culture Statement

Don’t meet all desired requirements? Studies have shown that some people are less likely to apply to jobs unless they meet every single desired qualification. At Blue Origin, we are dedicated to building an authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every desired qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.

Export Control Regulations

Applicants for employment at Blue Origin must be a U.S. citizen or national, U.S. permanent resident (i.e. current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

Background Check

- Required for all positions: Blue’s Standard Background Check
- Required for Certain Job Profiles: Defense Biometric Identification System (DBIDS) background check if at any time the role requires one to be on a military installation
- Required for Certain Job Profiles: Drivers who operate Commercial Motor Vehicles with a Gross Vehicle Weight (GVW), Gross Vehicle Weight Rating (GVWR) or combination of power unit and trailer that meets or exceeds 10,001 lbs. and/or transports placardable amounts of hazardous materials by ground in any vehicle on a public road while in commerce, may be subject to additional Federal Motor Carrier Safety Regulations including: Driver Qualification Files, Medical Certification (obtained before onboarding), Road Test, Hours of Service, Drug and Alcohol Testing, vehicle inspection requirements, CDL requirements (if applicable) and hazardous materials transportation/shipping training.
- Required for certain Job Profiles: Ability to obtain and maintain Merchant Mariner Credential, which includes pre-employment and random drug testing as well as DOT physical

Benefits

- Benefits include: Medical, dental, vision, basic and supplemental life insurance, paid parental leave, short and long-term disability, 401(k) with a company match of up to 5%, and an Education Support Program.
- Stock Options for all regular employees (working at least 20 hours/week)
- Paid Time Off: Up to four (4) weeks per year based on weekly scheduled hours, and up to 14 company-paid holidays.
- Dependent on role type and job level, employees may be eligible for benefits and bonuses based on the company's intent to reward individual contributions and enable them to share in the company's results, or other factors at the company's sole discretion. Bonus amounts and eligibility are not guaranteed and subject to change and cancellation. Please check with your recruiter for more details.