Job Description:
• WindBorne is looking for an ambitious Federal Compliance Lead to build our government compliance function from scratch and own it end-to-end.
• You will be the first dedicated compliance hire, reporting to the COO and ensuring we don’t get bottlenecked as we scale into production government software sales.
• You will lead the company through CMMC Level 2 certification, FedRAMP, IL5, and IL6, translating complex federal regulatory frameworks (FedRAMP, DoD CC SRG, CMMC, DFARS 7012) into practical decisions about technical architecture, documentation, and process.
• Make sure those decisions actually get implemented by coordinating work across engineering, operations, and business development teams.
Requirements:
• 3+ years experience with compliance audits (FedRAMP, PCI, SOC2, HIPAA, etc.) and prior US Government compliance and audit experience (FedRAMP, FISMA, NIST 800-53, NIST 800-171, US Government ATOs, etc) ideally at a defense contractor or defense tech start-up.
• Experience defining CUI boundaries and scoping assessment environments.
• Experience writing or substantially contributing to a System Security Plan.
• Proficiency with GRC platforms (Drata, Vanta, eMASS, or similar) and security tooling for evidence collection and continuous monitoring.
• Experience implementing security controls and assessing compliance in distributed applications on cloud infrastructure (e.g Amazon AWS, Microsoft Azure).
• Deep understanding of complex cloud infrastructure and security concepts, including ephemeral technologies (ex. containers).
• Proficiency with security concepts (encryption, authentication, etc.) and tooling for continuous monitoring (Tenable Security Center, Burp, SIEMs, etc.).
• Strong Project Management skills, being able to balance and track multiple projects going on at the same time to completion.
• Willing and able to obtain a US security clearance.
Benefits:
• 401(k)
• Dental insurance
• Health insurance
• Vision insurance
• Unlimited PTO
• Stock Option Plan
• Office food and beverages