Head of Cloud Security & Compliance

Frontera; Denver (CO); Hybrid; USD 175,000 - 220,000; Full time

Benefits offered by this job

Stock options

Health benefits

401(k)

PTO

Dog-friendly office

Catered lunch

Commuter stipend

Job summary

Frontera is hiring a Head of Information Security/Compliance to own our cloud security posture and compliance program as we scale. This role requires deep AWS security expertise, hands-on SOC 2 audits, and the ability to act as the senior security voice with customers and boards while collaborating with engineering.

You will build and run the security function from the ground up—policy, process, and tooling—while engaging with healthcare and enterprise customers to protect sensitive data at

Qualifications

• 8–12 years of security/compliance experience with hands-on SOC 2 audits on AWS
• Cloud security certifications or equivalent credentials
• Experience speaking directly with prospects/customers and senior leadership
• Enterprise security fluency and customer-facing presence

Responsibilities

• Own Frontera's cloud security architecture and AWS posture, including IAM design
• Perform hands-on SOC 2 audits on AWS infrastructure
• Build and mature the company’s security/compliance program for enterprise healthcare customers
• Be the senior security voice in customer conversations and security reviews
• Present security posture to customers, partners, and the board
• Partner with Engineering to embed security without slowing delivery
• Build security/compliance functions, policies, processes, and tooling from the ground up

Skills

SOC 2 audits

AWS security

Cloud security

Executive communication

Tools

AWS

Job description

Frontera is hiring a Head of Information Security/Compliance to own our cloud security posture and compliance program as we scale. This role requires deep AWS security expertise, hands-on SOC 2 audits, and the ability to act as the senior security voice with customers and boards while collaborating with engineering.

You will build and run the security function from the ground up—policy, process, and tooling—while engaging with healthcare and enterprise customers to protect sensitive data at