Director of Security Compliance & Authorization

Role overview Lead the security authorization function for a cloud software platform serving government customers. You’ll guide a specialist team, set authorization strategy, and build repeatable compliance practices across Department of Defense Risk Management Framework and FedRAMP environments.

Responsibilities - Direct authorization planning, control implementation, assessment preparation, and continuous monitoring. - Lead the authorization team, set priorities, and establish clear handoffs with engineering and security operations. - Improve compliance processes through automation, reusable controls, shared evidence, and cross-framework mappings. - Oversee authorization packages, assessment evidence, findings, and Plans of Action and Milestones (POA&Ms). - Coordinate with authorizing officials and independent assessors; manage audit schedules, vendor relationships, and compliance risks. - Report authorization milestones and material risks to senior stakeholders.

Requirements - At least 10 years of cybersecurity experience, including 6 years securing government authorizations such as DoD RMF or FedRAMP. - At least 5 years leading cybersecurity professionals and developing teams. - Direct experience with NIST SP 800-53, NIST SP 800-37, authorization assessments, and continuous monitoring. - Experience with cloud, SaaS, or PaaS security for government customers, including AWS, containers, CI/CD, infrastructure as code, and identity management. - Practical knowledge of eMASS, DISA PPSM registration, assessment evidence, and POA&M management. - Advanced proficiency for the ISSM work role under DoDM 8140.03; U.S. citizenship required.

Benefits and work setup This is a full-time role. Candidates must live in the Washington, D.C., Maryland, or Virginia area, or in Denver or Colorado Springs. The listed base salary is $200,000–$215,000, with potential equity awards and discretionary bonuses. Benefits include employer-paid medical, dental, and vision coverage for employees and dependents, a 401(k) contribution, wellness and family-planning support, home-office and professional-development stipends, flexible paid time off, federal holidays, parental leave, and remote-work options.