Director, Security Compliance

Leads CLEAR's security certification and assurance portfolio, covering FedRAMP Rev. 5, TSA programmes, SOC 2, PCI, SOX IT controls and customer frameworks across its commercial and federal products and the wider enterprise. The aim is to move compliance away from document-heavy work toward systems that produce evidence, building trust with travellers, enterprise customers and government partners.

The director turns requirements into reusable, testable controls mapped across frameworks, defining what each control must achieve and what evidence proves it, and works with Engineering to build those requirements into systems at design time. The role sets the direction for CLEAR's compliance platform, keeps external security claims accurate, leads customer security responses with responsible use of AI and human review, and works with the business when new regulations come with new markets. Success means certifications on schedule, continuous readiness, evidence that is complete and reusable, and audit findings closed on time.

CLEAR wants ten or more years in security compliance, audit or GRC, including leading a team, and direct FedRAMP experience with credibility among assessors. Working fluency in AWS, Kubernetes, APIs and infrastructure as code is expected, enough to read a Terraform plan and explain what it shows. Experience designing controls auditors relied on, owning a modern GRC platform or modernising a multi-framework programme, and leading change with executives and engineers are also sought. The role is based in New York.