SHORTList

Federal Compliance Lead

JOB INFO

Apply

Apply for this job directly on SHORTList.

Referral

Share your custom referral link for this job with qualified candidates. Earn the referral you lead to a hire.

COMPANYWindBorne Systems
BASE SALARY$130k – $170k+ Equity

As the Federal Compliance Lead, you will own our compliance function end-to-end and build the org around you. WindBorne is looking for an ambitious Federal Compliance Lead to build our government compliance function from scratch and own it end-to-end. You will be the first dedicated compliance hire, reporting to the COO and ensuring we don’t get bottlenecked as we scale into production government software sales. You will lead the company through CMMC Level 2 certification, FedRAMP, IL5, and IL6, translating complex federal regulatory frameworks (FedRAMP, DoD CC SRG, CMMC, DFARS 7012) into practical decisions about technical architecture, documentation, and process. Then, you will make sure those decisions actually get implemented by coordinating work across engineering, operations, and business development teams.

Responsibilities

  • 3+ years experience with compliance audits (FedRAMP, PCI, SOC2, HIPAA, etc.) and prior US Government compliance and audit experience (FedRAMP, FISMA, NIST 800-53, NIST 800-171, US Government ATOs, etc) ideally at a defense contractor or defense tech start-up.
  • Experience defining CUI boundaries and scoping assessment environments.
  • Experience writing or substantially contributing to a System Security Plan.
  • Proficiency with GRC platforms (Drata, Vanta, eMASS, or similar) and security tooling for evidence collection and continuous monitoring.
  • Experience implementing security controls and assessing compliance in distributed applications on cloud infrastructure (e.g Amazon AWS, Microsoft Azure).
  • Deep understanding of complex cloud infrastructure and security concepts, including ephemeral technologies (ex. containers).
  • Proficiency with security concepts (encryption, authentication, etc.) and tooling for continuous monitoring (Tenable Security Center, Burp, SIEMs, etc.).
  • Strong Project Management skills, being able to balance and track multiple projects going on at the same time to completion.
  • Willing and able to obtain a US security clearance.

Benefits

  • 401(k)
  • Dental insurance
  • Health insurance
  • Vision insurance
  • Unlimited PTO
  • Stock Option Plan
  • Office food and beverages