Director of Security Compliance & Authorization

Role overview Lead security authorization and compliance for cloud software operating in Department of Defense and FedRAMP environments. The director sets authorization strategy, guides a team through assessment and monitoring cycles, and builds repeatable controls and evidence processes that support secure product delivery. The role partners with engineering, security operations, product teams, assessors, and government authorizing officials.

Responsibilities - Own authorization strategy, control implementation, and continuous monitoring across DoD and FedRAMP programs. - Lead the security authorization team, setting priorities, team processes, and operating rhythms aligned with authorization cycles. - Define how authorization, engineering, and security operations share responsibility for maintaining compliance. - Create an automation-focused roadmap with capability gaps, staffing needs, dependencies, and measurable outcomes. - Direct assessment preparation, authorization submissions, evidence management, eMASS packages, DISA PPSM registration, findings, and POA&Ms. - Coordinate reusable controls and mappings across DoD RMF, FedRAMP, and customer frameworks; manage assessor relationships, audit schedules, and compliance reporting.

Requirements - At least ten years of progressive cybersecurity experience, including six years achieving authorizations under DoD RMF, FedRAMP, or comparable government frameworks. - At least five years leading cybersecurity teams, including setting priorities, developing staff, and managing performance. - Direct experience with NIST SP 800-53, NIST SP 800-37, DoD RMF, FedRAMP assessment, and continuous monitoring. - Experience owning security programs for government-facing cloud, SaaS, or PaaS products, including AWS, containers, CI/CD, infrastructure as code, and identity and access management. - Practical experience with eMASS, DISA PPSM registration, assessment evidence, and POA&M management. - DoDM 8140.03 qualification for the ISSM work role (722) at Advanced proficiency; U.S. citizenship is required.

Benefits and work setup - Full-time position; candidates must live in the DC/Maryland/Virginia area or Denver/Colorado Springs. - Base salary range of $200,000–$215,000, with potential equity awards and discretionary bonuses. - Medical, dental, and vision coverage for employees and dependents, plus a 401(k) contribution. - Wellness and family support, home office and technology stipend, professional development funding, flexible paid time off, federal holidays, and parental leave.