Director of Security (Copy)
Summary
Lead security strategy, compliance, and operations for a defense-focused startup, overseeing physical, personnel, and cybersecurity to support classified programs and government contracts.
- Develop and implement an enterprise-wide security strategy aligned with company objectives and defense contract requirements.
- Serve as the principal security advisor to executive leadership on all matters related to physical, personnel, and information security.
- Establish and maintain policies, procedures, and controls to safeguard classified, controlled unclassified, and sensitive information.
- Lead continuous improvement of the company’s overall security posture across personnel, facilities, and systems.
- Ensure compliance with the National Industrial Security Program (NISP) and applicable requirements from the Defense Counterintelligence and Security Agency (DCSA).
- Maintain compliance with U.S. Department of Defense security requirements and other relevant federal regulations.
- Oversee facility clearance (FCL) management and personnel security clearance processes.
- Manage government security audits, inspections, and investigations.
- Oversee physical security programs including access control, surveillance systems, alarms, and secure facility design.
- Implement and manage procedures for classified material handling and storage.
- Conduct site security assessments and vulnerability testing to identify and mitigate risks.
- Direct personnel security operations including background investigations, clearance processing, and ongoing monitoring.
- Lead the company’s insider threat program, including detection, reporting, and mitigation processes.
- Oversee security education, awareness, and training programs for employees and contractors.
- Ensure alignment between physical security, cybersecurity, and IT operations.
- Support compliance with cybersecurity frameworks including NIST SP 800-171, DFARS 252.204-7012, and other applicable requirements.
- Ensure adherence to security policies, legal requirements, and industry standards (CMMC).
- Lead incident response coordination for security-related events and breaches.
- Develop and maintain crisis response, emergency preparedness, and business continuity plans.
- Serve as incident commander during major security events or emergencies.
- Lead and mentor security and IT team members, fostering a culture of accountability and continuous improvement.
- Manage departmental budgets, vendor relationships, and security technology investments.
- Establish metrics and reporting to measure program effectiveness and reduce organizational risk.
- Bachelor’s degree in Security Management, Criminal Justice, Intelligence Studies, or related field
- 10+ years of progressive security leadership experience, preferably within a defense, aerospace, or government contracting environment.
- U.S. Citizenship required due to ITAR regulations, with the ability to obtain and maintain a DoD security clearance.
- Experience serving as a Facility Security Officer (FSO) or overseeing FSO functions.
- Extensive knowledge of NISPOM, DoD security requirements, and federal compliance standards.
- Strong understanding of risk management principles and experience conducting risk assessments and vulnerability management, including in classified environments.
- Experience with incident response planning and execution, particularly concerning classified information.
- Familiarity with data protection laws and regulations.
- Excellent communication skills, with the ability to articulate complex security requirements to technical and non-technical stakeholders.
- Extensive knowledge of NIST SP 800-171, DFARS 252.204-7012, ISO 27001, ITAR, EAR, CUI handling requirements, and classified information security protocols.
- Experience with security audit processes and interfacing with regulatory auditors.
- 12+ years of progressive security leadership experience, preferably within a defense, aerospace, or government contracting environment.
- Professional Industry or Security Certification; i.e., Industrial Security Professional (ISP), Certified Information Systems Security Professional (CISSP), or Physical Security Professional (PSP).
- Prior experience as an Information Security Officer or ISSM
- Experience with classified information systems (e.g., Joint Worldwide Intelligence Communications System - JWICS, Secret Internet Protocol Router Network - SIPRNet).
- Prior experience in an early-stage, high-growth tech or hardware startup environment.
- Ability to drive change, mature processes, and adapt quality systems to evolving business needs.
- Ability to influence change and adapt processes as business needs evolve
- Demonstrated ability to manage complex, fast-paced operations in a dynamic environment
- This role is based in San Diego, CA.
- We welcome candidates who are local or open to relocating; relocation assistance is available and may be included in the offer package where appropriate.
- We offer comprehensive medical, dental, and visions plans
- 401(k) Retirement Savings Plan to invest in your long-term retirement goals
- Equity grants for new hires
- Unlimited PTO
- Extremely generous company holiday calendar, including a holiday hiatus in November, & December.
- Generous Parental Leave
- Lifestyle Spending Account
- FSA
- DCFSA
- HSA
- Hospital Indemnity insurance
- Critical Illness insurance
- Accident insurance
- Basic Life/AD&D, short-term and long-term disability insurance, 100% covered by Firestorm. Plus, the option to purchase additional life insurance for you and your family.
- Mental Health Resources: We provide free mental health resources 24/7 including therapy and more. Additional work-life services, such as free legal and financial support, are available to you as well.