Product Security Compliance Lead

Role Description

Second Front Systems (2F) is seeking an ambitious and mission-driven Product Security Compliance Lead to join our growing security organization. Reporting to the VP of Security, this role is a senior technical leader on the team. We are a dynamic, fast-growing entrepreneurial company at the intersection of cutting-edge technology and national security, committed to delivering transformative solutions that empower our nation's defenders.

At 2F, we thrive on innovation and purpose, combining a startup's agility with a clear mission to support national security. You will be at the forefront of turning security and compliance into a competitive advantage by automating the trust boundary and moving away from "static paperwork" toward a future of Continuous Authorization.

If you're a former ISSM or Security Architect who is excited by security that unlocks markets and missions rather than just checks boxes, we want to hear from you.

The Product Security Compliance Lead will lead a team of security and compliance specialists responsible for the technical translation and documentation of the security architecture and global accreditation programs that make Game Warden viable in some of the world's most demanding environments. You will shape how we design secure systems by defining control patterns, ensuring we meet stringent accreditation standards (FedRAMP, ISO 27001, US/UK/NATO ATOs), and leveraging AI and automation to produce the clear, defensible documentation and evidence required to prove our posture faster and at scale.

Note: This role requires U.S. citizenship due to government contract requirements. Additionally, candidates must reside in one of our approved hiring hubs:

• DC/Maryland/Virginia
• Raleigh/Durham/Chapel Hill, NC
• Denver/Colorado Springs, CO
• Dallas/Fort Worth/Austin, TX

Qualifications

• 8+ years of experience in information security, with significant time in product/platform security, security architecture, or security engineering.
• Hands-on experience leading technical delivery on one or more security accreditation or certification programs (e.g., FedRAMP, DoD / IC ATOs, ISO 27001, public sector cloud frameworks such as NCSC / UK gov or NATO).
• Demonstrated ability to work with and/or author security documentation such as SSPs, POA&Ms, policies, and technical standards.
• Strong understanding of modern cloud architectures and platforms (e.g., AWS, containers/Kubernetes, SaaS delivery models).
• Comfort partnering with engineering teams on real-world design and implementation, able to propose pragmatic solutions, not just policy language.
• Excellent written and verbal communication skills; able to translate complex security and compliance topics into clear, actionable guidance for both technical and non-technical stakeholders.
• People leadership experience in security or compliance teams.
• Active U.S. Top Secret (TS) security clearance required; eligibility for access to Sensitive Compartmented Information (SCI) required.

Requirements

• Experience operating in defense, federal government, public sector, or other highly regulated industries.
• Familiarity with frameworks such as NIST 800-53, NIST 800-171, ISO 27001, FedRAMP baselines, and NCSC cloud security principles.
• Prior collaboration with 3PAOs, certification bodies, or accreditation authorities.
• Relevant certifications (e.g., CISSP, CCSP, CISM, ISO 27001 Lead Implementer/Auditor) are a plus, not a prerequisite.
• Experience with infrastructure-as-code, observability, and automation in support of security and compliance goals.
• Prior experience working in cleared or classified environments and with government security/accreditation stakeholders.

Benefits

• The expected base salary range for this role is $137,000–$191,000.
• Final compensation will be based on factors such as experience, skills, level, and geographic location.
• This role may also be eligible for discretionary bonuses and equity grants as part of the total compensation package.