Director, Compliance

ICON•Austin, TX

About The Position

ICON is seeking its first Head of Compliance to build and lead the company's compliance function. The role owns ICON's corporate compliance program and its compliance with the FAR, DFARS, and agency supplements across government work. The Government Contracts team is responsible for contract review, negotiation, and administration; this position ensures ICON meets the obligations created by those contracts. The Director will report to the General Counsel, hire and lead the compliance team, manage the function's budget, tools, and external relationships, and report program health and risks to the executive team and, as needed, the Board. The role covers ICON's Build, Prime, and Tech business units and partners with the Head of IT on cybersecurity compliance obligations.

Requirements

A bachelor's degree and at least 10 years of experience in compliance, ethics, government contracts, internal audit, or regulatory legal practice; or an advanced degree (JD, LLM, MBA, or MS) and at least 8 years of relevant experience.
Experience designing, implementing, or running a corporate compliance program or a major component of one.
People-management experience.
Experience presenting compliance matters to an executive team, audit committee, or board of directors.
Ability to travel approximately 15 to 25%, including to project sites, government installations, supplier facilities, and industry events.

Nice To Haves

Experience applying the FAR and DFARS in a contractor environment, including subcontract flow-downs, representations and certifications, and responses to Contracting Officer inquiries.
Experience preparing for or responding to a U.S. Government audit, review, or investigation, such as DCAA, DCMA, CPSR, Office of Inspector General, or GAO.
Experience at a hardware, manufacturing, aerospace, space, or construction company that performs government contracts.
Experience administering U.S. export controls and sanctions, including ITAR, restricted party screening, and foreign national access controls.
Experience supporting MILCON, NASA, or intelligence community programs.
Experience at a venture-backed or high-growth company.
Experience standing up a compliance program from the ground up and then running it.
Juris Doctor with active bar membership in good standing, or an MBA.
CCEP, CCEP-I, CFE, CIA, NCMA CFCM or CPCM, or an export compliance credential such as ECoP or CUSECO.
An active or previously held U.S. Government security clearance.
Working familiarity with GRC platforms, contract lifecycle management systems, restricted party screening tools, and training and attestation systems.

Responsibilities

Design and run ICON's corporate compliance program, including risk assessment, policies, training, monitoring and testing, investigations, corrective action, regulatory change management, metrics, and reporting.
Address ethics and business conduct, conflicts of interest, anti-corruption, trade and export, supply chain, and data privacy, expanding program coverage as the business and regulatory exposure grow.
Manage internal investigations from intake through resolution and remediation.
Ensure compliance with FAR, DFARS, and agency supplement obligations across government work, including subcontract flow-downs, representations and certifications, and responses to Contracting Officer inquiries.
Build and maintain documentation and evidence demonstrating compliance to the government.
Lead audit readiness and responses for DCAA, DCMA, Contractor Purchasing System Reviews, Inspector General inquiries, and similar reviews.
Partner with the Head of IT on CMMC and NIST SP 800-171, including how obligations apply through contracts, representations made to the government, and the sufficiency of supporting evidence.
Hire, develop, and lead the compliance team; manage the function's budget, tooling, and outside counsel and vendor relationships.
Establish the operating cadence for reviews, testing cycles, and reporting so the program can operate without the Director attending every meeting.
Report program health, open risks, and remediation status to the executive team and, as needed, the Board.