Head of Information Security/Compliance

Title: Head of Information Security/Compliance Location: Denver, Colorado; Remote

Role Overview

Frontera is hiring a Head of Information Security/Compliance to own our cloud security posture and compliance program as we scale. This isn't a compliance-generalist seat that partners with engineering from the outside - we need someone with real cloud security depth who can operate inside our AWS infrastructure, hold SOC 2 audits, and be the senior security voice both internally and in front of customers and boards. As we sell into healthcare and enterprise, this role is central to Frontera being trusted with sensitive data at scale.

What You'll Own

• Own Frontera's cloud security architecture and posture on AWS, including IAM design
• Run and own SOC 2 audits against our AWS infrastructure — not just coordinate them, but do the hands-on work
• Build and mature Frontera's compliance program as we scale into enterprise and healthcare customers
• Serve as the senior security voice in customer and prospect conversations — sitting on security reviews with prospects and customers, not just internal audits
• Present security and compliance posture to customers, partners, and the board
• Partner with Engineering to embed security into how we build, without becoming a bottleneck
• Build the security and compliance function from the ground up: policy, process, and tooling

Qualifications

• 8-12 years of security/compliance experience, including hands-on work running SOC 2 audits against AWS cloud infrastructure — not managed a team that did, or partnered with engineering from a compliance-manager seat
• Hands-on IAM architecture experience
• Cloud security certification(s)
• Has sat on security reviews directly with prospects or customers, and can speak to how those conversations went
• Enterprise fluency — comfortable being the senior security presence in front of customers, partners, and boards

Preferred

• Healthcare or regulated-industry background
• Fractional CISO experience at a digital health company, especially if you're looking to move in-house
• Security leadership at a Series B-D health tech company
• An engineering background that grew into compliance ownership, with strong infrastructure or platform depth

We have determined a salary range for this position that takes into account several factors including experience, knowledge, education, skills, and abilities. Please note that the salary information is a general guideline and the exact salary will be determined based on the individual’s qualifications and experience, with consideration given to the factors listed above. All full-time employee benefits include a stake in shared success through stock options, health benefits, 401(k) plan, and 4 weeks of PTO per year.

This role is based in Denver, CO or remote within the US.

Expected Salary Range: $175,000 to $220,000