Head of Security Compliance & Authorization (Cybersecurity)

Location: Remote, but candidates must reside in the DC/Maryland/Virginia hiring hub in the United States.

Salary: $200,000–$215,000 per year, plus potential equity awards and discretionary bonuses.

Company

hirify.global Systems is a public-benefit software company that enables secure software delivery across government and regulated networks, with a focus on U.S. national security.

What you will do

• Lead the Security Authorization and Compliance team and establish priorities, operating processes, and measurable outcomes.
• Own corporate compliance programs and security authorization for the Game Warden platform, including DoD RMF, FedRAMP, CMMC, SOC 2, and ISO standards.
• Oversee authorization packages, control implementations, assessment evidence, POA&Ms, continuous monitoring, and authorization decisions.
• Partner with Product, Engineering, Platform, Legal, Security Operations, and executive leadership to integrate security into architecture, planning, releases, and engineering priorities.
• Build reusable controls, shared evidence, cross-framework mappings, and automation for compliance reporting, control validation, and authorization-package maintenance.
• Manage assessment partners, penetration testing providers, vendors, GRC investments, risk reporting, and the corporate audit calendar.

Requirements

• 10+ years of progressive cybersecurity experience, including product security, cloud security, security engineering, compliance, or government authorization programs.
• 5+ years leading cybersecurity professionals, with experience setting priorities, developing talent, managing performance, and scaling teams.
• Experience owning security programs for cloud platforms, SaaS products, PaaS environments, or similarly complex technology organizations.
• Strong knowledge of application security, cloud security architecture, vulnerability management, secure software development, software supply chain risk, AWS, Kubernetes, containers, CI/CD, infrastructure as code, IAM, logging, and observability.
• Direct experience with NIST SP 800-53, NIST SP 800-37, DoD RMF, FedRAMP, or comparable federal authorization requirements, including complex authorization packages and continuous monitoring.
• CISSP or an equivalent advanced cybersecurity certification is required, and candidates must meet applicable DoD 8140 qualification requirements.

Nice to have

• Active TS/SCI clearance or current eligibility.
• Experience with DoD Impact Level 4 or 5, FedRAMP Moderate or High, Kubernetes-based DevSecOps platforms, or multi-tenant government cloud environments.
• Familiarity with CMMC, SOC 2, ISO 27001, ISO 20000-1, Cyber Essentials Plus, or international security assurance requirements.
• Advanced certifications such as CISM, CCSP, CSSLP, PMP, or CGRC.
• Experience supporting national security, defense, intelligence, or other highly regulated customers.

Culture & Benefits

• Purpose-driven work supporting secure delivery of mission-critical software to the U.S. government.
• 100% employer-paid medical, dental, and vision coverage for employees and dependents.
• 401(k) with a 3% company contribution, equity incentive plan, and referral bonus program.
• Flexible paid time off, federal holidays, generous parental leave, and flexible remote work opportunities.
• Wellness benefits, mental health resources, family planning support, home office and technology stipend, and annual professional development stipend.

Hiring process

• Applications are reviewed on a rolling basis, and the position remains open until filled.
• Applicants complete the online application form through the careers page.