About the RoleJeppesen ForeFlight builds navigation data and flight-operations software trusted by military, government, and enterprise customers. We recently obtained a facility clearance, and our government business carries growing contractual security and compliance obligations.
This is a new role. You will build and lead the Government Programs Office, which is accountable for making sure that what our government contracts promise is true, provable, and correctly reported. You will work closely with Legal on contract delivery, with Security on controls, and with Infrastructure, which operates the environments you govern.
Key Responsibilities - Leadership. Lead and develop a small team. Establish the office's operating model, metrics, and regular reporting to the CISO and executive leadership.
- Industrial security. Serve as, or directly supervise, the Facility Security Officer. Keep the facility clearance in good standing under 32 CFR Part 117 (NISPOM), including personnel clearances, required reporting to DCSA, security reviews, and changed-condition reporting. Oversee the insider threat program.
- Government environments. Own the compliance posture and authorization boundary of the environments that hold sensitive and controlled government data, currently an Azure GCC High enclave. Maintain the system security plan and supporting documentation, plan of action and milestones, and continuous monitoring evidence, and lead readiness for NIST SP 800-171 and CMMC Level 1 and Level 2 assessments. Hold the authority to flag when an environment is not compliant.
- Contract compliance. Partner with Legal to assess government clauses before signature, including DFARS 252.204-7012, 7019, 7020, and 7021, FAR 52.204-21, Section 889, and DD Form 254 requirements. Maintain a register of contract obligations, manage flowdowns to subcontractors, and prepare NIST SP 800-171 (SPRS) and CMMC affirmations for signature by the designated senior official.
- Program delivery and customer assurance. Act as the accountable point of contact for government customers on security and compliance. Manage contract deliverables, customer security questionnaires and audits, and incident notifications within contractual timelines.
- Export control coordination. Work with Legal to make sure export classification and handling questions for government-related work have a clear owner.
- Training and awareness. Deliver training to employees, managers, and teams on the compliance and security requirements of federal contract work. Keep the curriculum current as contract cybersecurity and physical security obligations and regulations change.
Basic Qualifications - Significant experience (typically 7+ years) in government compliance, industrial security, or program management supporting DoD or federal contracts, including leading people or programs.
- Working knowledge of the NISPOM, the DFARS cybersecurity clauses, and NIST SP 800-171 / CMMC.
- Experience working alongside legal or contracts teams on government contract obligations.
- U.S. citizenship and the ability to obtain and maintain a personnel security clearance at the level of the company's facility clearance. The company will sponsor the clearance; it is required to serve as Facility Security Officer and key management personnel.
- Clear written and spoken communication with executives, engineers, and government representatives.
Preferred Qualifications - Prior experience in at least one of these roles: Facility Security Officer, Insider Threat Program Senior Official, or Information System Security Manager.
- Completion of the CDSE FSO curriculum, or willingness to complete it within the timeframe required after appointment.
- A CMMC certification (such as CCP or CCA), or experience supporting a C3PAO, DIBCAC, or Joint Surveillance Voluntary Assessment (JSVA).
- Experience with government cloud environments such as Azure GCC High, AWS GovCloud, or FedRAMP-authorized services.
- Experience with NIST SP 800-53-based frameworks, such as FedRAMP or DoD cloud impact levels.
- Experience with a newly cleared facility or a corporate ownership change.
Pay is based upon candidate experience and qualifications, as well market and business considerations: Summary Pay Range: $204,000-$250,000
#LI-Remote
