Three or more years leading compliance or security programs in a high-growth technology or defense startup Demonstrated success achieving and maintaining FedRAMP High Authority to Operate or equivalent Deep familiarity with IL5, CMMC Level 2, SOC 2, NIST 800-171 Proven ability to design and run automated evidence collection, policy management, and vulnerability-tracking workflows Strong written and verbal communication skills for technical and executive audiences Experience coordinating red-team, penetration-test, or bug-bounty programs