Head of Information Security/Compliance

Frontera; Denver (CO); Hybrid; USD 175,000 - 220,000; Full time

Benefits offered by this job

Stock options

Health benefits

401(k)

PTO

Dog-friendly office

Catered lunch

Commuter stipend

Job summary

Frontera is hiring a Head of Information Security/Compliance to own our cloud security posture and compliance program as we scale. This role requires deep AWS security expertise, hands-on SOC 2 audits, and the ability to act as the senior security voice with customers and boards while collaborating with engineering.

You will build and run the security function from the ground up—policy, process, and tooling—while engaging with healthcare and enterprise customers to protect sensitive data at

Qualifications

• 8–12 years of security/compliance experience with hands-on SOC 2 audits on AWS
• Cloud security certifications or equivalent credentials
• Experience speaking directly with prospects/customers and senior leadership
• Enterprise security fluency and customer-facing presence

Responsibilities

• Own Frontera's cloud security architecture and AWS posture, including IAM design
• Perform hands-on SOC 2 audits on AWS infrastructure
• Build and mature the company’s security/compliance program for enterprise healthcare customers
• Be the senior security voice in customer conversations and security reviews
• Present security posture to customers, partners, and the board
• Partner with Engineering to embed security without slowing delivery
• Build security/compliance functions, policies, processes, and tooling from the ground up

Skills

SOC 2 audits

AWS security

Cloud security

Executive communication

Tools

AWS

Job description

Frontera is reimagining how children with autism and other behavioral health needs get the care they deserve. We bring together world-class clinicians, technologists, and autism specialists to build cutting-edge AI tools that help care teams work smarter and spend more time with the children and families who need them most.

Our platform is HIPAA-compliant and designed for the real-world needs of behavioral health teams - from psychologists to ABA therapists. By combining evidence-based care with powerful technology, we’re expanding access to high-quality services for families everywhere.

Our Mission

Frontera exists to close the care gap: every child, no matter where they live, should be able to access effective behavioral healthcare.

Role Overview

Frontera is hiring a Head of Information Security/Compliance to own our cloud security posture and compliance program as we scale. This isn't a compliance-generalist seat that partners with engineering from the outside - we need someone with real cloud security depth who can operate inside our AWS infrastructure, hold SOC 2 audits, and be the senior security voice both internally and in front of customers and boards. As we sell into healthcare and enterprise, this role is central to Frontera being trusted with sensitive data at scale.

What You'll Own

• Own Frontera's cloud security architecture and posture on AWS, including IAM design
• Run and own SOC 2 audits against our AWS infrastructure — not just coordinate them, but do the hands-on work
• Build and mature Frontera's compliance program as we scale into enterprise and healthcare customers
• Serve as the senior security voice in customer and prospect conversations — sitting on security reviews with prospects and customers, not just internal audits
• Present security and compliance posture to customers, partners, and the board
• Partner with Engineering to embed security into how we build, without becoming a bottleneck
• Build the security and compliance function from the ground up: policy, process, and tooling

Qualifications

• 8-12 years of security/compliance experience, including hands-on work running SOC 2 audits against AWS cloud infrastructure — not managed a team that did, or partnered with engineering from a compliance-manager seat
• Cloud security certification(s)
• Has sat on security reviews directly with prospects or customers, and can speak to how those conversations went
• Enterprise fluency — comfortable being the senior security presence in front of customers, partners, and boards

Preferred

• Healthcare or regulated-industry background
• Fractional CISO experience at a digital health company, especially if you're looking to move in-house
• Security leadership at a Series B-D health tech company
• An engineering background that grew into compliance ownership, with strong infrastructure or platform depth

We have determined a salary range for this position that takes into account several factors including experience, knowledge, education, skills, and abilities. Please note that the salary information is a general guideline and the exact salary will be determined based on the individual’s qualifications and experience, with consideration given to the factors listed above. All full-time employee benefits include a stake in shared success through stock options, health benefits, 401(k) plan, and 4 weeks of PTO per year.

This role is based in Denver, CO or remote within the US.

Expected Salary Range: $175,000 to $220,000

Why Frontera?

• Opportunity to be at the forefront of innovation in pediatric healthcare.
• Work on challenging and impactful projects that leverage cutting-edge technologies.
• Collaborate with a talented and passionate team in a fast-paced and dynamic environment.
• Make a real difference in the lives of children and families in rural communities.
• Competitive salary and benefits package.
• Dog-friendly office.
• Catered lunch from local Denver restaurants five days a week, plus occasional breakfasts and dinners.
• Robust snack program and great coffee options (including cappuccino machine and cold brew cans).
• Regular team events and low-key socials.
• Up to $150/month commuter stipend, discounted nearby parking, and a discounted Colorado Athletic Club membership.
• Thoughtfully designed space for focus, collaboration, and connection.
• Competitive health benefits, stock options, 401(k), and generous PTO.

Join us in building the future of behavioral healthcare!

We believe talent knows no borders and value contributions from people of all backgrounds. At the same time, due to our current timelines and operational needs, we can only consider candidates who already have unrestricted U.S. work authorization and do not require employer sponsorship now or in the future. We are unable to sponsor or maintain any visa types at this time (including OPT / STEM OPT, H-1B, H-4 EAD, L-1, J-1, O-1, TN, or EAD-based authorizations such as pending asylum, TPS, etc.).Do you currently have unrestricted U.S. work authorization (e.g., U.S. citizen, lawful permanent resident/green card holder, or equivalent) and will not require employer sponsorship now or in the future?