Senior Director, Security Compliance

This position requires eligibility to access controlled unclassified information (CUI) and export controlled data, and candidates must meet applicable federal requirements, including U.S. person status where required.

The Pay, Perks, & Benefits 
•    Salary is competitive and will be determined based on relevant experience, skills, market benchmarks, and internal equity.
•    Retirement benefits through the Virginia Retirement System (VRS) with employer match 
•    Generous time off, including vacation, paid sick leave, and paid family leave after one year 
•    Paid holidays, including a two week paid winter break 
•    Anthem PPO and HSA health plans, with excellent dental options 
•    Employer paid life insurance 

How You Will Help the Team
You will lead the Institute’s cybersecurity and regulatory compliance efforts, ensuring readiness, accountability, and sustained compliance in support of DoD contracts and mission delivery.

Key Contributions
• Lead and advance CMMC, ITAR, and related cybersecurity and regulatory compliance programs
• Guide the organization through CMMC readiness, assessments, affirmations, and continuous compliance
• Reduce cybersecurity and regulatory risk across all departments
• Translate complex regulatory requirements into practical, sustainable processes
• Partner closely with IT, legal, research, manufacturing, and operations teams
• Serve as the Institute’s CMMC Affirming Official, ensuring accurate and defensible attestations
• Uphold integrity and accountability in all regulatory submissions and compliance activities

Your Knowledge & Expertise
You bring deep, hands on expertise in cybersecurity compliance and defense contracting requirements, with the ability to lead complex compliance programs and communicate effectively across the organization.

Key Qualifications
• 12–15 years of progressive experience in cybersecurity, information security, or regulatory compliance, including senior leadership responsibility
• 8 years of direct experience with CMMC and NIST SP 800‑171 compliance frameworks
• Demonstrated success leading gap assessments, remediation efforts, POA&M management, and audit readiness activities
• Extensive experience developing and maintaining System Security Plans (SSPs), policies, procedures, and governance documentation
• 7 years supporting defense contractors and navigating DoD cybersecurity and compliance requirements, including DFARS and FAR 52.204‑21
• Proven ability to manage and collaborate with third‑party assessors, consultants, and C3PAOs
• Working knowledge of SPRS and other government compliance and reporting systems
• Strong program and project management experience overseeing complex, cross‑functional initiatives
• Ability to clearly communicate complex technical and compliance concepts to both technical and non‑technical stakeholders, including executive leadership
• Experience with ITAR, EAR, export compliance, and restricted party screening in regulated environments

What Makes Work Here Different
At IALR, compliance is not treated as a checkbox exercise. This role has the opportunity to shape and influence a culture of accountability, awareness, and shared responsibility across a diverse organization that includes research, advanced learning, and manufacturing environments. You will work with mission driven teams supporting national security, workforce development, and applied research initiatives. Leadership values thoughtful risk management, collaboration, and continuous improvement, giving you the space to build programs that are both rigorous and practical. Your work will have visible impact, supporting critical partnerships while helping the Institute grow responsibly and securely.

Equal Opportunity Employer
The Institute for Advanced Learning and Research is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.