The Compliance & Security Manager is responsible for leading the company's regulatory compliance and physical security programs to ensure full compliance with the Texas Compassionate Use Program (CUP), Texas Department of Public Safety (DPS) regulations, applicable state and federal laws, and company policies. This position oversees compliance monitoring, facility security, investigations, access control, surveillance systems, licensing requirements, and regulatory inspections across cultivation, manufacturing, fulfillment, distribution, and retail operations. The Compliance & Security Manager serves as a strategic business partner to Operations, Manufacturing, Retail, Quality, Human Resources, Facilities, and executive leadership to protect the company's licenses, employees, patients, products, and assets while minimizing regulatory and operational risk. This role requires strong knowledge of regulated industries, exceptional judgment, and the ability to balance compliance requirements with operational efficiency.

Essential Functions:

• Maintain a thorough understanding of the Texas Compassionate Use Program (CUP), Texas Department of Public Safety (DPS) Administrative Rules, and other applicable state and federal regulations governing medical cannabis operations.

• Monitor regulatory changes and implement updates to company policies, SOPs, and operational practices.

• Ensure ongoing compliance across cultivation, manufacturing, laboratory, fulfillment, transportation, and retail operations.

• Maintain all required compliance documentation, records, licenses, registrations, permits, and inspection files.

• Coordinate regulatory reporting, submissions, renewals, and correspondence with the Texas Department of Public Safety and other regulatory agencies.

• Lead internal compliance audits and facility inspections to proactively identify regulatory gaps and operational risks.

• Develop, implement, and monitor corrective and preventive action (CAPA) plans resulting from audits, inspections, or investigations.

• Support and coordinate all regulatory inspections and serve as a primary point of contact for regulators during site visits, and maintain inspection readiness across all licensed locations.

• Own the company's DEA registration compliance: registration file maintenance, initial inventory upon registration grant, biennial inventories, and federal recordkeeping under 21 CFR Parts 1301/1304.

• Implement DEA-conformant employee screening procedures (21 CFR 1301.90) and security controls.

• Report theft or significant loss to DEA (Form 106) and DPS within required timelines - the JD says "regulatory agencies" generically; name the federal obligation.

• Serve as point of contact for DEA inspections alongside DPS.

• Oversee the company's physical security program, including access control systems, employee credentialing, visitor management, restricted access areas, key control, and security badge administration.

• Oversee CCTV surveillance, alarm systems, intrusion detection, and security monitoring to ensure continuous compliance with regulatory requirements, coordinating testing, maintenance, and upgrades with Facilities, IT, and vendors.

• Develop and maintain security procedures that protect employees, patients, products, cash, intellectual property, and company assets; conduct periodic security risk assessments.

• Review surveillance footage and access logs as needed to investigate incidents or verify compliance, and ensure secure storage, handling, transportation, and destruction of cannabis products.

• Lead investigations involving diversion, theft, inventory discrepancies, unauthorized access, policy violations, workplace misconduct, security breaches, or other compliance concerns.

• Collect and preserve evidence, review surveillance footage, interview witnesses, prepare detailed investigative reports, and maintain confidential investigation files.

• Ensure all reportable incidents are documented and reported to regulatory agencies within required timelines; track investigation outcomes and implement corrective actions.

• Develop, maintain, and continuously improve compliance and security policies, SOPs, and work instructions in partnership with department leaders.

• Develop and facilitate employee training on regulatory compliance, facility security, diversion prevention, incident reporting, access control, and confidentiality; monitor completion and maintain training records.

• Identify regulatory, operational, and security risks and develop mitigation strategies; develop KPIs for compliance and security programs and recommend process improvements.

Additional Responsibilities:

• Partner with Operations, Manufacturing, Cultivation, Retail, Facilities, Human Resources, IT, Finance, and Quality to ensure compliance requirements are integrated into day-to-day operations.

• Support new facility openings, renovations, operational changes, and expansion initiatives from a compliance and security perspective.

• Participate in cross-functional projects involving regulatory implementation, process improvement, and operational excellence.

• Build positive working relationships with regulatory agencies, law enforcement, security vendors, and external auditors.

• Assist with business continuity planning, emergency response procedures, and crisis management activities.

• Travel Requirements: Ability to travel between company locations throughout Texas as needed.

• Availability to respond to after-hours security or compliance incidents when necessary.

What you need to succeed:

• Bachelor's degree in Criminal Justice, Business Administration, Public Administration, Regulatory Affairs, Security Management, or a related field; equivalent experience may be considered.

• Five (5) or more years of progressively responsible experience in regulatory compliance, corporate security, risk management, investigations, or a related function.

• Minimum three (3) years of leadership or supervisory experience.

• Experience working in a highly regulated industry such as medical cannabis, pharmaceuticals, healthcare, food manufacturing, biotechnology, or similar regulated environments.

• Strong understanding of compliance management systems, investigations, audit methodologies, and risk assessment.

• Experience managing CCTV systems, access control systems, alarm monitoring, and physical security programs.

• Demonstrated ability to interpret regulations and translate requirements into practical operational procedures.

• Strong analytical, organizational, communication, and problem-solving skills, with the ability to manage confidential information with discretion and professionalism.

• Proficiency with Microsoft Office Suite and experience using compliance management or incident tracking software.

• Preferred: Experience with the Texas Compassionate Use Program (CUP) and Texas Department of Public Safety regulations.

• Preferred: Professional certifications such as CCEP, CPP, PSP, PCI, CFE, or similar; experience supporting multi-site operations and electronic surveillance/access control platforms.

• Physical Demands: Ability to walk manufacturing, cultivation, warehouse, and retail facilities for extended periods and occasionally lift up to 25 pounds.

Benefits Package:

Medical, Dental, Vision

Telehealth - Medical

Telehealth - Mental Health Counseling

401(k) with company matching

Paid Vacation

Paid Sick Leave

Paid Holidays

Bereavement leave

Pre-Tax Flexible Spending Accounts

Basic Term Life Insurance and AD&D

Travel Reimbursement (if applicable)

Gym Reimbursement up to $50/month

& More