Director, Government Programs

ForeFlight•Austin, TX

6h•$204,000 - $250,000•Remote

About The Position

Jeppesen ForeFlight builds navigation data and flight-operations software trusted by military, government, and enterprise customers. We recently obtained a facility clearance, and our government business carries growing contractual security and compliance obligations. This is a new role. You will build and lead the Government Programs Office, which is accountable for making sure that what our government contracts promise is true, provable, and correctly reported. You will work closely with Legal on contract delivery, with Security on controls, and with Infrastructure, which operates the environments you govern.

Requirements

Significant experience (typically 7+ years) in government compliance, industrial security, or program management supporting DoD or federal contracts, including leading people or programs.
Working knowledge of the NISPOM, the DFARS cybersecurity clauses, and NIST SP 800-171 / CMMC.
Experience working alongside legal or contracts teams on government contract obligations.
U.S. citizenship and the ability to obtain and maintain a personnel security clearance at the level of the company’s facility clearance. The company will sponsor the clearance; it is required to serve as Facility Security Officer and key management personnel.
Clear written and spoken communication with executives, engineers, and government representatives.

Nice To Haves

Prior experience in at least one of these roles: Facility Security Officer, Insider Threat Program Senior Official, or Information System Security Manager.
Completion of the CDSE FSO curriculum, or willingness to complete it within the timeframe required after appointment.
A CMMC certification (such as CCP or CCA), or experience supporting a C3PAO, DIBCAC, or Joint Surveillance Voluntary Assessment (JSVA).
Experience with government cloud environments such as Azure GCC High, AWS GovCloud, or FedRAMP-authorized services.
Experience with NIST SP 800-53-based frameworks, such as FedRAMP or DoD cloud impact levels.
Experience with a newly cleared facility or a corporate ownership change.

Responsibilities

Lead and develop a small team. Establish the office’s operating model, metrics, and regular reporting to the CISO and executive leadership.
Serve as, or directly supervise, the Facility Security Officer. Keep the facility clearance in good standing under 32 CFR Part 117 (NISPOM), including personnel clearances, required reporting to DCSA, security reviews, and changed-condition reporting. Oversee the insider threat program.
Own the compliance posture and authorization boundary of the environments that hold sensitive and controlled government data, currently an Azure GCC High enclave. Maintain the system security plan and supporting documentation, plan of action and milestones, and continuous monitoring evidence, and lead readiness for NIST SP 800-171 and CMMC Level 1 and Level 2 assessments. Hold the authority to flag when an environment is not compliant.
Partner with Legal to assess government clauses before signature, including DFARS 252.204-7012, 7019, 7020, and 7021, FAR 52.204-21, Section 889, and DD Form 254 requirements. Maintain a register of contract obligations, manage flowdowns to subcontractors, and prepare NIST SP 800-171 (SPRS) and CMMC affirmations for signature by the designated senior official.
Act as the accountable point of contact for government customers on security and compliance. Manage contract deliverables, customer security questionnaires and audits, and incident notifications within contractual timelines.
Work with Legal to make sure export classification and handling questions for government-related work have a clear owner.
Deliver training to employees, managers, and teams on the compliance and security requirements of federal contract work. Keep the curriculum current as contract cybersecurity and physical security obligations and regulations change.