Head of Security Compliance & Authorization
Second Front Systems · Remote · Remote ·
COMPENSATION
$200k – $215k
Listed on the employer's job board (Ashby)
- Leadership role
- DC/MD/VA hub
- FedRAMP & RMF
- Cloud security focus
- Full-time position
You will lead the Security Authorization team, establishing priorities and operating rhythms to support secure product delivery. Reporting to the VP of Security, you will own corporate compliance programs and security authorization for the Game Warden platform across federal and national security environments.
This role requires balancing mission delivery with regulatory expectations while integrating security throughout the product lifecycle. You will work closely with Product, Engineering, and Legal leadership to ensure assessment readiness and maintain government authorizations.
What you'll do
- Lead the Security Authorization and Compliance team and set strategic priorities
- Define ownership and processes for security authorization and continuous monitoring
- Manage authorization packages for Department of Defense and federal environments
- Ensure control implementations and assessment evidence remain accurate and defensible
- Direct readiness activities for security assessments, audits, and authorization decisions
- Partner with Engineering to integrate security requirements into product planning
- Establish a coordinated compliance approach across frameworks like DoD RMF and SOC 2
- Expand automation for control validation, evidence collection, and compliance reporting
- Provide executive leadership with clear reporting on material risks and program status
What you'll need
- 10+ years of progressive cybersecurity experience with significant responsibility
- 5+ years leading cybersecurity professionals and scaling teams
- Experience owning security programs for cloud platforms or SaaS products
- Strong knowledge of application security, cloud architecture, and vulnerability management
- Practical understanding of AWS, Kubernetes, containers, and CI/CD pipelines
- Direct experience with government security authorization programs like NIST and FedRAMP
- Familiarity with eMASS, DISA PPSM, STIGs, and Cloud Computing Security Requirements
- CISSP or equivalent advanced cybersecurity certification required
- Must meet applicable DoD 8140 qualification requirements
Nice to have
- Active TS/SCI clearance or current eligibility
- Experience supporting DoD Impact Level 4 or 5 cloud environments
- Experience leading FedRAMP Moderate or High authorization programs
- Familiarity with CMMC, ISO 27001, or international security assurance requirements
- Experience implementing automated control testing or compliance as code
- Advanced certifications such as CISM, CCSP, CSSLP, or CGRC
Stack
- AWS
- Kubernetes
- eMASS
- DISA PPSM
- CI/CD pipelines
- SAST/DAST tools
How you'll work
- Candidates must reside in DC, Maryland, or Virginia hiring hub
- Full-time position with flexible remote work opportunities
- Flexible paid time off plus all federal holidays
What you get
- Base salary between $200,000 and $215,000
- 100% employer-paid medical, dental, and vision coverage
- 401(k) with a 3% company contribution
- Equity incentive plan and discretionary bonuses
- New hire technology and home office stipend
- Annual professional development stipend
- Generous parental leave and comprehensive wellness benefits
Hiring process
- Click the Apply button and complete the application form
- Applications are reviewed on a rolling basis until filled