[Hiring] Director of Security Compliance & Authorization @Second Front Systems

Role Description

Second Front Systems is looking for a mission-focused, cloud-native, government-authorization-experienced director of Security Compliance & Authorization to strengthen our security authorization function, leading ISSOs, managers, and engineers protecting Game Warden across DoD and FedRAMP environments.

Operating at the intersection of product security, cloud platforms, and government authorization frameworks, you will be responsible for owning security authorization strategy, control implementation, assessment readiness, and continuous monitoring for Game Warden in DoD and FedRAMP environments.

You will lead the Security Authorization team through authorization cycles, control validation, evidence management, and audit coordination, ensuring that Game Warden maintains current authorizations, passes assessments, and scales securely across national security customers.

We need someone capable of:

• Directing authorization packages, eMASS management, and POA&M health across DoD RMF and FedRAMP frameworks.
• Establishing reusable controls, shared evidence, automation for continuous monitoring, and compliance reporting.
• Serving as primary relationship owner with authorizing officials, 3PAOs, and Security Control Assessors through authorization reviews.

As a key partner to the Chief Information Security Officer, Product, Engineering, Mission Success, and government authorizing officials, you will drive authorization readiness, reduce assessment risk, and create durable compliance infrastructure that scales with product delivery, serving as technical authority on government authorization and the architect of 2F's compliance program.

Note: Candidates must reside in one of our approved hiring hubs:

• DC/Maryland/Virginia
• Denver/Colorado Springs, CO

This is a full-time position.

Qualifications

• Ten or more years of progressive cybersecurity experience with significant responsibility for product security, cloud security, security engineering, or compliance, including at least six years achieving authorizations within government frameworks such as DoD RMF or FedRAMP.
• Five or more years leading cybersecurity professionals: setting priorities, developing talent, managing performance, and scaling teams.
• Direct experience with DoD and federal security authorization programs, including NIST SP 800-53, NIST SP 800-37, DoD RMF, and FedRAMP assessment and continuous monitoring.
• Hands-on experience owning security programs for cloud platforms, SaaS products, or PaaS environments supporting government customers in AWS, containers, CI/CD pipelines, infrastructure as code, and identity and access management.
• Practical proficiency with eMASS package management, DISA PPSM registration, assessment evidence tracking, and POA&M management.
• Qualification under DoDM 8140.03 for the ISSM work role (722) at Advanced proficiency level.
• U.S. citizenship is required for this role.

Requirements

• Own authorization strategy, control implementation, and continuous monitoring for Game Warden across DoD and FedRAMP environments.
• Lead the Security Authorization team; establish priorities, operating rhythms, and processes aligned to government authorization cycles.
• Define ownership models and handoffs between Security Authorization, Engineering, and Security Operations for authorization maintenance.
• Build an automation-first roadmap identifying capability gaps, staffing needs, technical dependencies, and measurable compliance outcomes.
• Direct assessment readiness activities, resolve authorization blockers before submission to authorizing officials and 3PAOs, and own submission decisions.
• Establish quality standards and controls for eMASS package management, DISA PPSM registration, assessment evidence, findings, and authorization documentation.
• Orchestrate a coordinated compliance approach across DoD RMF, FedRAMP, and customer-specific frameworks using reusable controls and cross-framework mappings.
• Manage the audit calendar, vendor relationships with 3PAOs and assessors, and GRC technology investments; report material risks and authorization milestones to leadership.

Benefits

• Competitive salary
• 100% employer-paid medical, dental, and vision coverage for you and your dependents
• 401(k) with a 3% company contribution
• Comprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more
• Equity incentive plan
• New hire technology and home office stipend
• Annual professional development stipend
• Flexible paid time off, plus all federal holidays
• Generous parental leave
• Flexible remote work opportunities
• Employee referral bonus program