Director of Security and Compliance

Title: Director of Security and Compliance

Reports To: Chief Security Officer

Primary Location: Remote

Security Clearance: Active Secret Clearance

Position Summary

The Director of Security and Compliance is responsible for designing, implementing, documenting, and continuously improving the company's internal control environment and business processes. This role serves as the corporate lead for audit readiness, process governance, risk management, and compliance initiatives supporting government contracting operations.

The successful candidate will develop standardized policies and procedures, coordinate internal assessments, monitor compliance activities, facilitate external audits, and drive corrective actions that strengthen organizational effectiveness while supporting future growth.

Essential Duties and Responsibilities

Internal Controls & Governance

• Develop and maintain the company's internal control framework.
• Evaluate business processes and identify opportunities to improve efficiency, consistency, and compliance.
• Design and implement preventive and detective controls across business functions.
• Conduct periodic internal control reviews and process assessments.
• Track remediation activities through completion.
• Develop governance standards that support organizational scalability.

Audit Readiness & Compliance

Coordinate organizational readiness for:

• CMMC Assessments
• AS9100 Internal and External Audits
• ISO Certifications (as applicable)
• Customer Audits
• Government Compliance Reviews
• Purchasing System Reviews
• Other Federal or Prime Contractor assessments

Responsibilities include:

• Maintaining audit evidence repositories
• Coordinating audit requests
• Managing audit schedules
• Conducting internal readiness reviews
• Developing corrective action plans
• Tracking findings through resolution
• Serving as the primary coordinator during external audits

Process Management

• Develop and maintain company Standard Operating Procedures (SOPs).
• Create process maps and workflow documentation.
• Standardize operational processes across departments.
• Identify opportunities for automation and operational improvement.
• Ensure documentation remains current with regulatory requirements.

Risk Management

• Perform operational and compliance risk assessments.
• Identify process gaps and control deficiencies.
• Develop mitigation strategies.
• Monitor effectiveness of implemented controls.
• Maintain organizational risk registers.

Continuous Improvement

• Lead continuous improvement and quality assurance initiatives throughout the organization.
• Recommend technology solutions that improve efficiency and compliance.
• Establish performance metrics for key business processes.
• Promote a culture of accountability, quality, and operational excellence.

Reporting & Executive Support

• Develop executive dashboards measuring compliance, audit readiness, and process performance.
• Present findings, risks, and recommendations to executive leadership.
• Prepare reports supporting strategic decision-making.

Minimum Qualifications

• Bachelor's degree in Business Administration, Finance, Accounting, Quality Management, Engineering, or a related field.
• Seven (7) or more years of experience in internal controls, compliance, quality management, government contracting, internal audit, or business operations.
• Experience supporting government contractors.
• Demonstrated experience preparing organizations for external audits.
• Strong knowledge of process documentation and workflow management.
• Excellent written and verbal communication skills.
• Strong analytical, organizational, and project management skills.
• Ability to work independently while leading cross-functional initiatives.

Preferred Qualifications

• Experience implementing or maintaining AS9100 Quality Management Systems.
• Experience supporting CMMC implementation or assessments.
• ISO 9001 experience.
• Lean Six Sigma Green Belt or Black Belt certification.
• Certified Internal Auditor (CIA).
• Certified Quality Auditor (CQA).
• Certified Information Systems Auditor (CISA).
• Project Management Professional (PMP).

Knowledge, Skills & Abilities

• Thorough understanding of government contracting regulations and compliance requirements.
• Knowledge of FAR, DFARS, NISPOM, and related federal regulations.
• Strong understanding of internal control frameworks and risk management principles.
• Experience documenting complex business processes.
• Ability to manage multiple projects simultaneously.
• Exceptional problem-solving and organizational skills.
• Strong interpersonal skills with the ability to influence across departments.
• Advanced Microsoft Office proficiency, particularly Excel, Word, and PowerPoint.

What Success Looks Like

Within the first year, the successful candidate will:

• Establish a centralized internal controls program.
• Develop standardized SOPs across core business functions.
• Create an enterprise audit readiness program supporting DCSA, DCAA, AS9100, CMMC, and customer audits.
• Implement a company-wide corrective action tracking process.
• Develop executive dashboards measuring compliance, risk, and process performance.
• Improve organizational efficiency through standardized processes and continuous improvement initiatives.

Equal Opportunity Employer

Paradigm Max Q is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other protected characteristic under applicable federal, state, or local law.

Salary Range (DMV Market): $175,000-210,000 annually

Location-Based Compensation: Compensation is determined based on the employee's primary work location, applicable labor market, experience, education, certifications, security clearance, and other job-related factors. Candidates working outside the DMV may receive a different salary range consistent with local market conditions and applicable law.