Director, Security Compliance
Core
Lead security certification portfolio and evidence-backed systems for commercial and federal products to earn trust from travelers, enterprise customers, and government partners.
Role type
Director, Security Compliance (GRC)
Builds
Trusted relationships with auditors, reusable testable controls, and a modern compliance platform infrastructure.
Domain
Cybersecurity compliance, GRC, Federal regulations (FedRAMP, TSA), Cloud Security
Required skills
Security compliance/GRC leadership, FedRAMP experience, Cloud environment fluency (AWS, Kubernetes, IaC), Control design, Modern GRC platform ownership, Change management
Preferred skills
AI application in compliance, Multi-framework program modernization
Technologies
AWS, Kubernetes, Terraform, APIs
Responsibilities
Lead certification and assurance portfolio (FedRAMP, SOC 2, PCI, SOX); Translate requirements into reusable, testable controls; Partner with Engineering to embed controls at design time; Set direction for compliance platform and infrastructure; Lead customer security responses and AI usage guidelines; Align business on new market regulations.
Seniority
Director, strategic leadership with hands-on technical judgment
