Director, Government Programs

Jeppesen ForeFlight Careers•Austin, TX

2d•Remote

About The Position

Jeppesen ForeFlight is hiring a Director, Government Programs to build and lead its Government Programs Office. The office ensures the company’s government contract commitments are fulfilled, documented, and accurately reported. The role works closely with Legal on contract delivery, Security on controls, and Infrastructure on the environments under its governance. It is accountable for industrial security, government-environment compliance, contract obligations, customer assurance, export-control coordination, and security and compliance training.

Requirements

Typically 7 or more years of significant experience in government compliance, industrial security, or program management supporting DoD or federal contracts, including leading people or programs.
Working knowledge of NISPOM, DFARS cybersecurity clauses, and NIST SP 800-171/CMMC.
Experience working with legal or contracts teams on government contract obligations.
U.S. citizenship.
Ability to obtain and maintain a personnel security clearance at the level of the company’s facility clearance; the company will sponsor the clearance. Clearance is required to serve as Facility Security Officer and key management personnel.
Clear written and spoken communication with executives, engineers, and government representatives.

Nice To Haves

Prior experience as a Facility Security Officer, Insider Threat Program Senior Official, or Information System Security Manager.
Completion of the CDSE FSO curriculum, or willingness to complete it within the required timeframe after appointment.
A CMMC certification, such as CCP or CCA, or experience supporting a C3PAO, DIBCAC, or Joint Surveillance Voluntary Assessment (JSVA).
Experience with government cloud environments such as Azure GCC High, AWS GovCloud, or FedRAMP-authorized services.
Experience with NIST SP 800-53-based frameworks, such as FedRAMP or DoD cloud impact levels.
Experience with a newly cleared facility or a corporate ownership change.

Responsibilities

Lead and develop a small team; establish the office’s operating model, metrics, and regular reporting to the CISO and executive leadership.
Serve as, or directly supervise, the Facility Security Officer and maintain the facility clearance in good standing under 32 CFR Part 117 (NISPOM), including personnel clearances, DCSA reporting, security reviews, and changed-condition reporting.
Oversee the insider threat program.
Own the compliance posture and authorization boundary of environments holding sensitive and controlled government data, currently an Azure GCC High enclave.
Maintain the system security plan, supporting documentation, plan of action and milestones, and continuous monitoring evidence; lead readiness for NIST SP 800-171 and CMMC Level 1 and Level 2 assessments.
Flag when an environment is not compliant.
Partner with Legal to assess government contract clauses before signature, including specified DFARS and FAR clauses, Section 889, and DD Form 254 requirements.
Maintain a register of contract obligations, manage subcontractor flowdowns, and prepare NIST SP 800-171 (SPRS) and CMMC affirmations for signature by the designated senior official.
Serve as the accountable point of contact for government customers on security and compliance.
Manage contract deliverables, customer security questionnaires and audits, and incident notifications within contractual timelines.
Coordinate with Legal to ensure export classification and handling questions for government-related work have a clear owner.
Deliver security and compliance training to employees, managers, and teams, and keep the curriculum current as obligations and regulations change.