Head of Security Compliance & Authorization

Head of Security Compliance & Authorization

Second Front Systems (2F) is seeking a Head of Security Compliance & Authorization to lead the security programs that protect our Game Warden platform and enable its use across national security environments. Reporting to the Vice President of Security, this leader will own corporate compliance programs (SOC 2, ISO, CMMC, etc.) and security authorization for the Game Warden platform (RMF/FedRAMP)..

You will lead the Security Authorization team, establish priorities and operating rhythms, and ensure the organization has the processes, technical capabilities, and evidence required to support secure product delivery and maintain government authorizations.

You will work closely with Product, Engineering, Platform, Legal, and business leadership to integrate security throughout the product lifecycle. This includes secure architecture, application security, vulnerability management, control implementation, authorization strategy, assessment readiness, and continuous monitoring.

This is a leadership role for someone who can build durable programs, develop high-performing teams, and bring structure to complex security and compliance requirements. The successful candidate will understand both cloud-native engineering and government authorization, with the judgment to balance mission delivery, customer commitments, technical risk, and regulatory expectations.

Note:

Candidates must reside in our DC/Maryland/Virginia hiring hub

This is a full-time position.

What You'll Do

• Lead the Security Authorization and Compliance team.
• Establish the product security and compliance strategy for Game Warden in alignment with the company’s business objectives, product roadmap, customer commitments, and enterprise security strategy.
• Define ownership and operating processes for security authorization and continuous monitoring, including the handoffs with Engineering and Security Operations.
• Build a security roadmap that identifies capability gaps, required investments, staffing needs, technical dependencies, and measurable outcomes.
• Provide leadership oversight for security authorization packages supporting Department of Defense, federal, and other national security environments.
• Ensure authorization packages, control implementations, assessment evidence, POA&Ms, and continuous monitoring activities remain accurate, current, and defensible.
• Establish the standards and quality controls used by Security Authorization Specialists to manage eMASS packages, DISA PPSM registrations, assessment evidence, findings, and authorization documentation.
• Direct readiness activities for security assessments, third-party reviews, government audits, and authorization decisions. Ensure teams address issues before they become assessment blockers.

One last thing:

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Are you ready to join our team:

To apply, click the “Apply for This Job” button at the top or bottom of this page and complete the application form. This position will remain open until filled, and applications will be reviewed on a rolling basis.

State notices:

Colorado:

In accordance with Colorado law, applicants may redact their date of birth, dates of attendance, and dates of graduation from any uploaded documents.

Maryland:

Under Maryland law, an employer may not require or demand, as a condition of employment, prospective employment, or continued employment, that an individual submit to or take a polygraph examination or similar test. An employer who violates this law is guilty of a misdemeanor and subject to a fine not exceeding $100.