Foundry Robotics

Head of Security

Emeryville, CA. Posted 2 months ago

The role

The Head of Security will own the full security and compliance program end to end. This includes achieving CMMC Level 2 certification and protecting CUI, export-controlled technical data, and customer IP across edge, on-prem, and cloud infrastructure.

What you will do

  • Drive CMMC Level 2 certification to completion
  • Own NIST SP 800-171 / DFARS 252.204-7012 posture and continuous compliance
  • Stand up and administer the ITAR/EAR export-control program
  • Maintain AS9100 and SOC 2 alignment
  • Own identity, endpoint, and network security across the stack
  • Define and enforce CUI boundary architecture across edge, on-prem, and cloud
  • Own the Incident Response Plan and serve in the IRT
  • Manage vendor and third-party risk
  • Build the security roadmap and budget
  • Hire, mentor, and lead a security team

Required qualifications

  • Understanding of national security facility requirements
  • Previous/current Experience as a Facility Security Officer
  • Proven track record taking an organization through CMMC Level 2 or NIST SP 800-171 assessment
  • Deep, hands-on knowledge of DFARS, CUI handling, and ITAR/EAR export controls
  • Strong security engineering foundation in identity, endpoint, network, and cloud (AWS) security
  • Experience building or scaling a security function at a startup or fast-growing company
  • U.S. person status

Nice to have

  • SOC 2 and AS9100 experience
  • Manufacturing, defense, aerospace, or hardware-adjacent background
  • Familiarity with securing edge/robotics or ML/GPU infrastructure
  • Relevant certifications (CISSP, CISM, CCP/CCA, etc.)

Benefits

  • Equity
  • Comprehensive health, dental and vision coverage
  • Generous PTO

Before you apply

  • U.S. person status required for ITAR-controlled work

About the company

Foundry Robotics is building an AI-native robotics manufacturing company focused on deploying advanced assembly and production capability for leading robotics companies and national-security-critical hardware.