Head of Security

You will own the end-to-end security and compliance program. You will lead CMMC certification, protect controlled and export-controlled data, establish security architecture and incident response, manage vendor risk, maintain regulatory alignment, and build the security team, roadmap, and budget.

Responsibilities

• Drive CMMC Level 2 certification, evidence collection, and C3PAO assessment
• Own NIST SP 800-171 and DFARS compliance
• Administer ITAR and EAR export-control programs
• Maintain AS9100 and SOC 2 alignment
• Own identity, endpoint, and network security
• Define CUI boundary architecture across edge, on-premises, and cloud infrastructure
• Own incident response plans, tabletop exercises, and incident leadership
• Manage vendor and third-party risk
• Build the security roadmap and budget
• Hire, mentor, and lead security staff

Requirements

• Facility security requirements knowledge
• Facility Security Officer experience
• Experience leading a CMMC Level 2 or NIST SP 800-171 assessment
• Knowledge of DFARS, CUI handling, and ITAR or EAR export controls
• Identity, endpoint, network, and AWS security expertise
• Experience building or scaling a security function
• U.S. person status for ITAR-controlled work

Benefits

• Equity compensation
• Comprehensive health coverage
• Dental coverage
• Vision coverage
• Generous PTO