Director of Security Compliance & Authorization

Director of Security Compliance & Authorization

Second Front Systems is looking for a mission-focused, cloud-native, government-authorization-experienced director of Security Compliance & Authorization to strengthen our security authorization function, leading ISSOs, managers, and engineers protecting Game Warden across DoD and FedRAMP environments.

Operating at the intersection of product security, cloud platforms, and government authorization frameworks, you will be responsible for owning security authorization strategy, control implementation, assessment readiness, and continuous monitoring for Game Warden in DoD and FedRAMP environments.

You will lead the Security Authorization team through authorization cycles, control validation, evidence management, and audit coordination, ensuring that Game Warden maintains current authorizations, passes assessments, and scales securely across national security customers.

We need someone capable of directing authorization packages, eMASS management, and POA&M health across DoD RMF and FedRAMP frameworks; establishing reusable controls, shared evidence, automation for continuous monitoring, and compliance reporting; and serving as primary relationship owner with authorizing officials, 3PAOs, and Security Control Assessors through authorization reviews.

As a key partner to the Chief Information Security Officer, Product, Engineering, Mission Success, and government authorizing officials, you will drive authorization readiness, reduce assessment risk, and create durable compliance infrastructure that scales with product delivery, serving as technical authority on government authorization and the architect of 2F's compliance program.

Note: Candidates must reside in one of our approved hiring hubs:

• DC/Maryland/Virginia

• Denver/Colorado Springs, CO

This is a full-time position.

WHAT YOU’LL DO

• Own authorization strategy, control implementation, and continuous monitoring for Game Warden across DoD and FedRAMP environments.

• Lead the Security Authorization team; establish priorities, operating rhythms, and processes aligned to government authorization cycles.

• Define ownership models and handoffs between Security Authorization, Engineering, and Security Operations for authorization maintenance.

• Build an automation-first roadmap identifying capability gaps, staffing needs, technical dependencies, and measurable compliance outcomes.

• Direct assessment readiness activities, resolve authorization blockers before submission to authorizing officials and 3PAOs, and own submission decisions.

• Establish quality standards and controls for eMASS package management, DISA PPSM registration, assessment evidence, findings, and authorization documentation.

• Orchestrate a coordinated compliance approach across DoD RMF, FedRAMP, and customer-specific frameworks using reusable controls and cross-framework mappings.

• Manage the audit calendar, vendor relationships with 3PAOs and assessors, and GRC technology investments; report material risks and authorization milestones to leadership.

WHAT YOU BRING

• Ten or more years of progressive cybersecurity experience with significant responsibility for product security, cloud security, security engineering, or compliance, including at least six years achieving authorizations within government frameworks such as DoD RMF or FedRAMP.

• Five or more years leading cybersecurity professionals: setting priorities, developing talent, managing performance, and scaling teams.

• Direct experience with DoD and federal security authorization programs, including NIST SP 800-53, NIST SP 800-37, DoD RMF, and FedRAMP assessment and continuous monitoring.

• Hands-on experience owning security programs for cloud platforms, SaaS products, or PaaS environments supporting government customers in AWS, containers, CI/CD pipelines, infrastructure as code, and identity and access management.

• Practical proficiency with eMASS package management, DISA PPSM registration, assessment evidence tracking, and POA&M management.

• Qualification under DoDM 8140.03 for the ISSM work role (722) at Advanced proficiency level.

• U.S. citizenship is required for this role.

The base salary for this position will fall between $200,000 - 215,000. Your ultimate compensation will be determined by professional background, technical proficiency, seniority, and regional cost factors. Furthermore, this opportunity includes potential eligibility for equity awards and discretionary bonuses, rounding out a comprehensive total rewards offering.

SUCCESS AT 2F LOOKS LIKE:

• A proactive and solutions oriented mindset

• Viewing obstacles as opportunities for growth

• Having a bias toward action and tangible, measurable results

• Being team-oriented with a focus on personal responsibility and autonomy

PERKS & BENEFITS:

This role is a full time position. As a public benefit corporation, we’re a team of purpose-driven trailblazers transforming the future of U.S. national security. We hire the best to do their best and, as such, we are committed to providing the perks and benefits you need to be successful—both in- and outside the workplace.

PERKS OF JOINING OUR TEAM:

• Competitive salary

• 100% employer-paid medical, dental, and vision coverage for you and your dependents

• 401(k) with a 3% company contribution

• Comprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more

• Equity incentive plan

• New hire technology and home office stipend

• Annual professional development stipend

• Flexible paid time off, plus all federal holidays

• Generous parental leave

• Flexible remote work opportunities

• Employee referral bonus program

Visit our careers page https://secondfront.com/careers to learn more.

WHO WE ARE:

Second Front Systems (2F) is a public-benefit software company powering software for the free world. We eliminate the friction that slows innovation, enabling