Director of Security Compliance & Authorization

Second Front Systems•Washington, DC

2d•$200,000 - $215,000•Remote

About The Position

Second Front Systems is seeking a mission-focused Director of Security Compliance & Authorization to lead the security authorization function for Game Warden across Department of Defense and FedRAMP environments. The role operates across product security, cloud platforms, and government authorization frameworks, owning authorization strategy, control implementation, assessment readiness, and continuous monitoring. The director leads ISSOs, managers, and engineers through authorization cycles, control validation, evidence management, and audit coordination to maintain current authorizations and support secure growth across national security customers. The director will set the direction for authorization packages, eMASS management, and POA&M health; establish reusable controls, shared evidence, continuous-monitoring automation, and compliance reporting; and serve as the primary relationship owner for authorizing officials, 3PAOs, and Security Control Assessors. In partnership with the CISO, Product, Engineering, Mission Success, and government authorizing officials, this role will drive authorization readiness, reduce assessment risk, and build compliance infrastructure that scales with product delivery. Candidates must reside in an approved hiring hub: DC/Maryland/Virginia or Denver/Colorado Springs, Colorado. The position is full-time and requires U.S. citizenship.

Requirements

At least 10 years of progressive cybersecurity experience with significant responsibility for product security, cloud security, security engineering, or compliance.
At least 6 years achieving authorizations within government frameworks such as DoD RMF or FedRAMP.
At least 5 years leading cybersecurity professionals, including setting priorities, developing talent, managing performance, and scaling teams.
Direct experience with DoD and federal security authorization programs, including NIST SP 800-53, NIST SP 800-37, DoD RMF, and FedRAMP assessment and continuous monitoring.
Hands-on experience owning security programs for cloud platforms, SaaS products, or PaaS environments supporting government customers.
Experience with AWS, containers, CI/CD pipelines, infrastructure as code, and identity and access management.
Practical proficiency with eMASS package management, DISA PPSM registration, assessment evidence tracking, and POA&M management.
Qualification under DoDM 8140.03 for the ISSM work role (722) at Advanced proficiency level.
U.S. citizenship.
Must reside in one of the approved hiring hubs: DC/Maryland/Virginia or Denver/Colorado Springs, Colorado.

Responsibilities

Own authorization strategy, control implementation, and continuous monitoring for Game Warden across DoD and FedRAMP environments.
Lead the Security Authorization team and establish priorities, operating rhythms, and processes aligned to government authorization cycles.
Define ownership models and handoffs between Security Authorization, Engineering, and Security Operations for authorization maintenance.
Build an automation-first roadmap identifying capability gaps, staffing needs, technical dependencies, and measurable compliance outcomes.
Direct assessment readiness activities, resolve authorization blockers before submissions to authorizing officials and 3PAOs, and own submission decisions.
Establish quality standards and controls for eMASS package management, DISA PPSM registration, assessment evidence, findings, and authorization documentation.
Coordinate compliance across DoD RMF, FedRAMP, and customer-specific frameworks using reusable controls and cross-framework mappings.
Manage the audit calendar, 3PAO and assessor vendor relationships, and GRC technology investments; report material risks and authorization milestones to leadership.
Lead authorization cycles, control validation, evidence management, and audit coordination.
Serve as the primary relationship owner with authorizing officials, 3PAOs, and Security Control Assessors.
Partner with the CISO, Product, Engineering, Mission Success, and government authorizing officials to drive authorization readiness and reduce assessment risk.

Benefits

100% employer-paid medical, dental, and vision coverage for the employee and dependents.
401(k) with a 3% company contribution.
Comprehensive wellness benefits, including a One Medical membership, mental health resources, and family planning support.
Equity incentive plan and potential eligibility for equity awards.
New-hire technology and home-office stipend.
Annual professional development stipend.
Flexible paid time off and all federal holidays.
Generous parental leave.
Flexible remote work opportunities.
Employee referral bonus program.
Potential eligibility for discretionary bonuses.