SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 175,000 - 220,000 / annual
Frontera is building AI-powered tools to improve behavioral healthcare delivery for children with autism and other behavioral health needs. The company combines clinicians, technologists, and autism specialists to create HIPAA-compliant platforms that help care teams work more effectively.
You will own Frontera's information security and compliance function as the organization scales into enterprise and healthcare customers. This is a hands-on role requiring deep cloud security expertise, not a compliance-generalist position.
Key responsibilities include:
- Owning Frontera's cloud security architecture and posture on AWS, including IAM design and implementation
- Running SOC 2 audits directly against AWS infrastructure, performing hands-on technical work rather than just coordinating
- Building and maturing the compliance program from the ground up as the company scales into enterprise and healthcare
- Serving as the senior security voice in customer and prospect security reviews, not just internal audits
- Presenting security and compliance posture to customers, partners, and the board
- Partnering with Engineering to embed security into development processes without creating bottlenecks
- Developing security policies, processes, and tooling
Required qualifications:
- 8-12 years of hands-on security and compliance experience, including direct SOC 2 audit work against AWS infrastructure
- Hands-on IAM architecture experience
- Cloud security certification(s)
- Direct experience sitting on security reviews with prospects or customers
- Enterprise fluency and comfort as a senior security presence with customers, partners, and boards
Preferred experience includes healthcare or regulated-industry background, fractional CISO experience at digital health companies, security leadership at Series B-D health tech companies, or engineering background that evolved into compliance ownership with strong infrastructure depth.
The role is based in Denver, CO with remote flexibility within the US. Full-time position with stock options, health benefits, 401(k), and 4 weeks PTO annually.