Senior Director, Government Product Security Management

Qualys • North Carolina, DE

4d

About The Position

Qualys is seeking a strategic, technically proficient Senior Director to lead its government product security programs. Reporting to the VP, Head of Product Security, this role owns the strategic direction, oversight, and operational execution of Qualys’ FedRAMP Moderate and FedRAMP High authorizations and leads future efforts to pursue Department of Defense authorizations. The position also manages and mentors a specialized team, including the Senior Federal Security Analyst & ISSO, who handles day-to-day program execution. It requires deep knowledge of federal cloud-computing mandates, continuous monitoring, and enterprise SaaS architecture.

The Senior Director will guide federal authorization roadmaps, prepare for DoD IL4/IL5 authorizations, oversee audits and assessments, and partner with engineering and operations teams to ensure products and releases meet federal requirements. The role also provides executive reporting on program risks and resources and oversees change control, FIPS-validated cryptography, and boundary isolation.

Requirements

• 7+ years of progressive leadership experience in Information Security, Product Security, or Cloud Compliance.
• At least 5 years directing FedRAMP and/or DoD (DISA SRG) authorization programs for a SaaS/PaaS provider.
• Extensive knowledge of NIST SP 800-53, FedRAMP High baselines, the DoD Cloud Computing SRG, and FISMA requirements.
• Deep understanding of modern cloud architectures, Kubernetes/containerization, microservices, CI/CD pipelines, and implementation of security controls in complex SaaS environments.
• Demonstrated experience leading specialized federal security teams and managing internal and external compliance resources.
• Exceptional executive presence and ability to translate complex federal technical constraints into actionable strategies for C-suite leaders and engineering teams.
• U.S. citizenship and residence within the United States are strictly required.

Nice To Haves

• Active U.S. Secret or Top Secret security clearance, or ability to achieve one.
• Prior experience successfully guiding an organization through DoD authorization processes.
• CISSP, CISM, CCSP, or CAP certification.
• Experience with automated compliance-as-code tooling and modern GRC platforms.
• Experience with DoD authorization accelerator programs and providers.

Responsibilities

• Direct the strategic roadmap and operational maintenance of Qualys’ federal boundaries and ensure adherence to FedRAMP Moderate and FedRAMP High requirements.
• Lead architectural, technical, and programmatic readiness for future DoD IL4/IL5 authorizations in partnership with engineering and operations.
• Manage, mentor, and provide strategic guidance to the Senior Federal Security Analyst & ISSO, overseeing execution of continuous monitoring, POA&M management, and incident response within federal boundaries.
• Serve as the primary executive interface for 3PAO audits, JAB reviews, and agency sponsor communications.
• Collaborate with DevOps, SRE, Platform Engineering, and R&D to ensure products, features, and code releases meet federal compliance requirements before government-environment deployment.
• Maintain and present dashboards and risk metrics on the health, status, and resourcing of federal compliance programs to the VP of Product Security, CISO, and executive stakeholders.
• Oversee change control, FIPS-validated cryptography requirements, and logical and physical boundary isolation standards required by federal frameworks.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed