Product Security Compliance Lead

Second Front Systems

Product Security Compliance Lead at Second Front Systems ensuring security architecture and compliance programs. Leading a team in security accreditation efforts and driving innovation in compliance processes.

Posted 4/24/2026full-timeRemote • Colorado, North Carolina, Texas, Virginia • 🇺🇸 United StatesSenior💰 $137,000 - $191,000 per yearWebsite

Tech Stack

Tools & technologies

AWSCloudCyber SecurityKubernetesTypeScript

About the role

Key responsibilities & impact

Lead and mentor a team of security engineers and compliance specialists focused on architecture, control implementation, and audit readiness, fostering a culture of ownership, collaboration, and continuous improvement.
Define and maintain security architecture and control patterns for Game Warden and supporting services, aligned with mission, risk, and accreditation needs.
Serve as the senior technical lead for the execution of key security accreditations and certifications, including FedRAMP, US agency ATOs, ISO 27001, UK government / NCSC-aligned cloud security expectations, and NATO-related accreditations.
Lead creation and maintenance of System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), security policies, standards, and technical control narratives, ensuring documentation accurately reflects our architecture, controls, and operating reality.
Coordinate continuous monitoring activities, significant change reviews, and evidence collection so our accreditations stay current and our controls get stronger over time.
Partner closely with Security Operations, Cybersecurity Assessment, Product, Engineering, Legal, and Sales teams to support complex customer requirements and unblock deals in highly regulated environments.
Lead the technical representation of the company in third-party audits (3PAO) and accreditation sessions, ensuring all security documentation and postures are effectively articulated and defended to maintain authorization.

Requirements

What you’ll need

8+ years of experience in information security, with significant time in product / platform security, security architecture, or security engineering.
Hands-on experience leading technical delivery on one or more security accreditation or certification programs (e.g., FedRAMP, DoD / IC ATOs, ISO 27001, public sector cloud frameworks such as NCSC / UK gov or NATO).
Demonstrated ability to work with and / or author security documentation such as SSPs, POA&Ms, policies, and technical standards.
Strong understanding of modern cloud architectures and platforms (e.g., AWS, containers / Kubernetes, SaaS delivery models).
Comfort partnering with engineering teams on real-world design and implementation, able to propose pragmatic solutions, not just policy language.
Excellent written and verbal communication skills; able to translate complex security and compliance topics into clear, actionable guidance for both technical and non-technical stakeholders.
People leadership experience in security or compliance teams.
Active U.S. Top Secret (TS) security clearance required; eligibility for access to Sensitive Compartmented Information (SCI) required.

Benefits

Comp & perks

U.S. citizenship is required due to government contract specifications
Must reside in one of the approved hiring hubs: DC/Maryland/Virginia, Raleigh/Durham/Chapel Hill, NC, Denver/Colorado Springs, CO, Dallas/Fort Worth/Austin, TX

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security architecturecontrol implementationaudit readinesssecurity accreditationsFedRAMPISO 27001NATO-related accreditationsSystem Security Plans (SSPs)Plans of Action & Milestones (POA&Ms)cloud security

Soft Skills

leadershipmentoringcollaborationcontinuous improvementcommunicationproblem-solvingdocumentationstakeholder engagementtechnical representationadaptability

Certifications

U.S. Top Secret (TS) security clearanceeligibility for Sensitive Compartmented Information (SCI)ISO 27001 certificationFedRAMP certificationDoD / IC ATOs certificationNCSC / UK government cloud security certificationNATO accreditationsecurity compliance certificationscloud security certificationsinformation security certifications