Head of Security and Compliance

Overview

A rapidly growing technology company is seeking a Head of Security & Compliance to lead its information security, compliance, and risk management programs. This individual will be the driving force behind achieving and maintaining FedRAMP and CMMC certifications and will play a crucial role in establishing trust with both customers and partners. This is a highly visible and customer-facing role, ideal for someone who thrives in startup environments, enjoys building programs from the ground up, and can confidently represent security posture to enterprise and federal clients. Must be able to work on-site in San Francisco for 4 days a week.

What You’ll Do

• Lead all security and compliance initiatives , including strategy, roadmap, and execution for FedRAMP, CMMC, and related frameworks (e.g., SOC 2, ISO 27001).
• Own the FedRAMP and CMMC authorization process —from gap assessment through certification—working closely with internal stakeholders and external vendors, auditors, and assessors.
• Serve as the company’s security face to customers —participating in sales calls and technical discussions to communicate the company’s security controls, compliance posture, and risk management approach.
• Partner with engineering and product teams to integrate secure development practices, perform risk assessments, and ensure security-by-design principles.
• Collaborate with vendors and third-party providers to ensure all partners meet compliance and security requirements.
• Develop policies, procedures, and documentation supporting continuous compliance, incident response, and security awareness across the organization.
• Act as a trusted advisor to the executive team on emerging threats, regulatory changes, and evolving customer security expectations.

What You’ll Bring

Why Join

#J-18808-Ljbffr