Director of Security Compliance & Authorization

Director of Security Compliance & Authorization

Second Front Systems is looking for a mission-focused, cloud-native, government-authorization-experienced director of Security Compliance & Authorization to strengthen our security authorization function, leading ISSOs, managers, and engineers protecting Game Warden across DoD and FedRAMP environments.

Operating at the intersection of product security, cloud platforms, and government authorization frameworks, you will be responsible for owning security authorization strategy, control implementation, assessment readiness, and continuous monitoring for Game Warden in DoD and FedRAMP environments.

You will lead the Security Authorization team through authorization cycles, control validation, evidence management, and audit coordination, ensuring that Game Warden maintains current authorizations, passes assessments, and scales securely across national security customers.

We need someone capable of directing authorization packages, eMASS management, and POA&M health across DoD RMF and FedRAMP frameworks; establishing reusable controls, shared evidence, automation for continuous monitoring, and compliance reporting; and serving as primary relationship owner with authorizing officials, 3PAOs, and Security Control Assessors through authorization reviews.

As a key partner to the Chief Information Security Officer, Product, Engineering, Mission Success, and government authorizing officials, you will drive authorization readiness, reduce assessment risk, and create durable compliance infrastructure that scales with product delivery, serving as technical authority on government authorization and the architect of 2F's compliance program.

Note: Candidates must reside in one of our approved hiring hubs:

• DC/Maryland/Virginia
• Denver/Colorado Springs, CO

This is a full-time position.

What You’ll Do

• Own authorization strategy, control implementation, and continuous monitoring for Game Warden across DoD and FedRAMP environments.
• Lead the Security Authorization team; establish priorities, operating rhythms, and processes aligned to government authorization cycles.
• Define ownership models and handoffs between Security Authorization, Engineering, and Security Operations for authorization maintenance.
• Build an automation-first roadmap identifying capability gaps, staffing needs, technical dependencies, and measurable compliance outcomes.
• Direct assessment readiness activities, resolve authorization blockers before submission to authorizing officials and 3PAOs, and own submission decisions.
• Establish quality standards and controls for eMASS package management, DISA PPSM registration, assessment evidence, findings, and authorization documentation.
• Orchestrate a coordinated compliance approach across DoD RMF, FedRAMP, and customer-specific frameworks using reusable controls and cross-framework mappings.
• Manage the audit calendar, vendor relationships with 3PAOs and assessors, and GRC technology investments; report material risks and authorization milestones to leadership.

What You Bring

• Ten or more years of progressive cybersecurity experience with significant responsibility for product security, cloud security, security engineering, or compliance, including at least six years achieving authorizations within government frameworks such as DoD RMF or FedRAMP.
• Five or more years leading cybersecurity professionals: setting priorities, developing talent, managing performance, and scaling teams.
• Direct experience with DoD and federal security authorization programs, including NIST SP 800-53, NIST SP 800-37, DoD RMF, and FedRAMP assessment and continuous monitoring.
• Hands-on experience owning security programs for cloud platforms, SaaS products, or PaaS environments supporting government customers in AWS, containers, CI/CD pipelines, infrastructure as code, and identity and access management.
• Practical proficiency with eMASS package management, DISA PPSM registration, assessment evidence tracking, and POA&M management.
• Qualification under DoDM 8140.03 for the ISSM work role (722) at Advanced proficiency level.
• U.S. citizenship is required for this role.

The base salary for this position will fall between $200,000 - 215,000. Your ultimate compensation will be determined by professional background, technical proficiency, seniority, and regional cost factors. Furthermore, this opportunity includes potential eligibility for equity awards and discretionary bonuses, rounding out a comprehensive total rewards offering.

Success at 2F Looks Like

• A proactive and solutions oriented mindset
• Viewing obstacles as opportunities for growth
• Having a bias toward action and tangible, measurable results
• Being team-oriented with a focus on personal responsibility and autonomy

Perks & Benefits

This role is a full time position. As a public benefit corporation, we’re a team of purpose-driven trailblazers transforming the future of U.S. national security. We hire the best to do their best and, as such, we are committed to providing the perks and benefits you need to be successful - both in- and outside the workplace.

Perks of Joining Our Team

• Competitive salary
• 100% employer-paid medical, dental, and vision coverage for you and your dependents
• 401(k) with a 3% company contribution
• Comprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more
• Equity incentive plan
• New hire technology and home office stipend
• Annual professional development stipend
• Flexible paid time off, plus all federal holidays
• Generous parental leave
• Flexible remote work opportunities
• Employee referral bonus program

Visit our careers page to learn more.

Who We Are

Second Front Systems (2F) is a public-benefit software company powering software for the free world. We eliminate the friction that slows innovation, enabling faster, more secure development and deployment of software across government and regulated networks. Built by national security veterans and backed by top-tier venture capital, our platform is trusted by the world’s leading organizations to cut deployment timelines from years to weeks. We move fast, solve hard problems, and deliver trusted capabilities where they’re needed most. Our work strengthens global security and gives the United States and its allies a lasting competitive advantage. Learn more at secondfront.com .

Citizenship requirement

This position requires U.S. citizenship due to the nature of our work supporting U.S. government and defense customers.

One last thing

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Are you ready to join our team

To apply, click the “Apply for This Job” button at the top or bottom of this page and complete the application form. This position will remain open until filled, and applications will be reviewed on a rolling basis.

Colorado

In accordance with Colorado law, applicants may redact their date of birth, dates of attendance, and dates of graduation from any uploaded documents.

Maryland

Under Maryland law, an employer may not require or demand, as a condition of employment, prospective employment, or continued employment, that an individual submit to or take a polygraph examination or similar test. An employer who violates this law is guilty of a misdemeanor and subject to a fine not exceeding $100.

Where you can work

This role is 100% remote: you can work from anywhere in the world.