Product Security Compliance Lead

Product Security Compliance Lead ABOUT THE ROLE Second Front Systems (2F) is seeking an ambitious and mission-driven Product Security Compliance Lead to join our growing security organization. Reporting to the VP of Security, this role is a senior technical leader on the team. We are a dynamic, fast-growing entrepreneurial company at the intersection of cutting-edge technology and national security, committed to delivering transformative solutions that empower our nation's defenders. At 2F, we thrive on innovation and purpose, combining a startup's agility with a clear mission to support national security. You will be at the forefront of turning security and compliance into a competitive advantage by automating the trust boundary and moving away from "static paperwork" toward a future of Continuous Authorization. If you're a former ISSM or Security Architect who is excited by security that unlocks markets and missions rather than just checks boxes, we want to hear from you. The Product Security Compliance Lead will lead a team of security and compliance specialists responsible for the technical translation and documentation of the security architecture and global accreditation programs that make Game Warden viable in some of the world's most demanding environments. You will shape how we design secure systems by defining control patterns, ensuring we meet stringent accreditation standards (FedRAMP, ISO 27001, US/UK/NATO ATOs), and leveraging AI and automation to produce the clear, defensible documentation and evidence required to prove our posture faster and at scale. Note: This role requires U.S. citizenship due to government contract requirements. Additionally, candidates must reside in one of our approved hiring hubs: - DC/Maryland/Virginia - Raleigh/Durham/Chapel Hill, NC - Denver/Colorado Springs, CO - Dallas/Fort Worth/Austin, TX WHAT YOU’LL DO - Lead and mentor a team of security engineers and compliance specialists focused on architecture, control implementation, and audit readiness, fostering a culture of ownership, collaboration, and continuous improvement. - Define and maintain security architecture and control patterns for Game Warden and supporting services, aligned with mission, risk, and accreditation needs. - Serve as the senior technical lead for the execution of key security accreditations and certifications, including FedRAMP, US agency ATOs, ISO 27001, UK government / NCSC-aligned cloud security expectations, and NATO-related accreditations. - Lead creation and maintenance of System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), security policies, standards, and technical control narratives, ensuring documentation accurately reflects our architecture, controls, and operating reality. - Coordinate continuous monitoring activities, significant change reviews, and evidence collection so our accreditations stay current and our controls get stronger over time. - Partner closely with Security Operations, Cybersecurity Assessment, Product, Engineering, Legal, and Sales teams to support complex customer requirements and unblock deals in highly regulated environments. - Lead the technical representation of the company in third-party audits (3PAO) and accreditation sessions, ensuring all security documentation and postures are effectively articulated and defended to maintain authorization. SKILLS YOU’LL BRING TO OUR TEAM - 8+ years of experience in information security, with significant time in product / platform security, security architecture, or security engineering. - Hands-on experience leading technical delivery on one or more security accreditation or certification programs (e.g., FedRAMP, DoD / IC ATOs, ISO 27001, public sector cloud frameworks such as NCSC / UK gov or NATO). - Demonstrated ability to work with and / or author security documentation such as SSPs, POA&Ms, policies, and technical standards. - Strong understanding of modern cloud architectures and platforms (e ... (truncated, view full listing at source)