{"id":759215,"url":"https://alion.io/job/hevenaerotech-director-of-compliance","title":"Director of Compliance","company":{"id":678410,"name":"Heven AeroTech","domain":"hevenaerotech.com","url":"https://alion.io/company/hevenaerotech","size_band":"201-500","is_staffing_agency":false,"is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":91,"open_postings":7,"ghost_share":0,"stale_share":0.143,"repost_share":0,"time_to_fill_p50_days":63,"computed_at":"2026-09-24T05:45:00Z"}},"role":"Operations","role_family":"Operations","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sterling, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150000,"max":200000,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false},{"name":"NIST 800-171","optional":false}],"status":"live","first_seen_at":"2026-07-13T19:24:52Z","employer_posted_date":"2026-09-01","last_verified_at":"2026-09-25T01:41:37Z","board_verified":true,"closed_at":null,"days_open":73,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":73},"description":"Title: Director of Compliance\nCompany: Heven AeroTech\nLocation:\nFLSA: Exempt\nReports To: Chief of Staff\n\nAbout Our Company:\nAt Heven AeroTech (Heven), we don’t just believe in the power of people-we build our success on it. As a recognized leader in hydrogen-powered drones, we’ve earned recognition for creating a workplace where innovation thrives, collaboration is second nature, and every employee feels valued. Our culture is anchored in trust and a shared commitment to excellence.\nWe believe great teams are built on individuals who are humble, hungry, and smart -those who put team success first, take initiative to continuously improve, and demonstrate strong interpersonal awareness. At Heven, your voice matters, your ideas are heard, and your contributions make a tangible impact as you grow through hands-on experience and collaboration across the team.\nRole Summary:\nThe Director of Compliance leads Heven AeroTech’s enterprise-wide compliance program, ensuring adherence to federal export control laws (ITAR/EAR), industrial security requirements (NISPOM), cybersecurity mandates (CMMC/NIST 800-171), ethics obligations, occupational safety regulations, and employee benefits laws. Operating at the intersection of legal obligation and operational execution, this role directly supervises the Safety Manager and IT Administrator, advises executive leadership on regulatory risk, and fosters a culture of compliance and ethical conduct throughout the defense industrial base.\nEssential Responsibilities:\nExport Controls - ITAR / EAR Compliance Oversight\nProvide strategic oversight of Heven AeroTech’s export compliance obligations under the International Traffic in Arms Regulations (ITAR) and Export Administration Regulations (EAR), whether administered through a qualified internal Empowered Official (EO) or a contracted external compliance resource.\nEnsure the designation, performance management, and accountability of the Empowered Official function; serve directly as EO or manage the engagement of an external ITAR/EAR compliance consultant or law firm as operationally appropriate.\nOversee the development, maintenance, and continuous improvement of the Technology Control Plan (TCP) and Export Management and Compliance Program (EMCP).\nProvide executive-level review and approval authority over export license applications, Technical Assistance Agreements (TAAs), Manufacturing License Agreements (MLAs), and commodity classifications (USML/CCL).\nEnsure execution of export control audits, restricted party screening, and voluntary disclosure management to DDTC and BIS; maintain accountability for timely and accurate reporting.\nEnsure export control training programs meet regulatory requirements under 22 C.F.R. Part 122 and 15 C.F.R. Part 762, whether delivered internally or through an external provider.\nFacility Security Officer (FSO) / Industrial Security\nServe as or directly supervise the Facility Security Officer (FSO), ensuring compliance with the National Industrial Security Program Operating Manual (NISPOM) / 32 C.F.R. Part 117.\nManage personnel security clearance processes including investigations, visit authorizations, and incident reporting through DISS and related government systems.\nMaintain and administer the facility’s Standard Practice and Procedure (SPP) and ensure full Insider Threat Program compliance.\nInterface with the Defense Counterintelligence and Security Agency (DCSA) for facility inspections, program reviews, and adverse information reporting.\nOversee classified storage, document control, secure communication requirements, and SCI/SAP access where applicable.\nInformation Security (InfoSec) / Cybersecurity Compliance\nLead compliance with Cybersecurity Maturity Model Certification (CMMC), NIST SP 800-171, and DFARS 252.204-7012 for the protection of Controlled Unclassified Information (CUI).\nOversee the development and maintenance of the System Security Plan (SSP), Plans of Action & Milestones (POA&Ms), and incident response procedures.\nDirectly supervise the IT Administrator; provide strategic direction and oversight of IT operations to ensure information systems, networks, and cloud environments meet CMMC, NIST SP 800-171, and applicable cybersecurity compliance requirements.\nManage cybersecurity incident reporting obligations to the DoD and relevant program offices within required timelines.\nSupport CMMC third-party assessment organization (C3PAO) assessments and maintain certification documentation.\nEthics & Business Conduct\nAdminister Heven AeroTech’s Code of Business Ethics and Conduct and ensure compliance with FAR 52.203-13 (Contractor Code of Business Ethics and Conduct).\nManage the ethics hotline and reporting system; investigate potential violations and coordinate with HR, Legal, and management on corrective actions and disciplinary outcomes.\nDesign and deliver ethics training programs and awareness campaigns across all employee levels.\nPrepare and submit timely disclosures to the Government for violations of federal criminal law and the False Claims Act as required.\nChair or support the company’s Ethics & Compliance Committee; report to the Board Audit Committee or designated executive officer as required.\nEnvironmental, Health & Safety (EHS) Compliance\nProvide compliance oversight for occupational health and safety obligations under OSHA 29 C.F.R. Part 1910 and applicable state regulations within an aerospace manufacturing environment.\nEnsure regulatory compliance related to hazardous materials handling, chemical hygiene plans, and process safety requirements where applicable.\nOversee OSHA recordkeeping and reporting (300/301 logs), incident investigation processes, and interface with OSHA inspectors and regulatory authorities.\nDirectly supervise the Safety Manager; provide leadership, performance oversight, and development guidance while ensuring EHS program activities align with company compliance objectives and regulatory requirements.\nMonitor EPA and environmental compliance obligations related to manufacturing operations, including waste disposal, air emissions, and stormwater management.\nHIPAA & Benefits Compliance\nEnsure the company’s health plan and benefits administration practices comply with HIPAA Privacy and Security Rules, including Business Associate Agreement (BAA) oversight.\nOversee ERISA compliance for welfare benefit plans and coordinate with benefits counsel and third-party administrators on regulatory filings (Form 5500, SPDs, SARs).\nMonitor ACA employer compliance obligations, including applicable large employer (ALE) reporting (Forms 1094-C/1095-C) and affordability determinations.\nManage HIPAA incident response and breach notification obligations; conduct workforce training on PHI handling and minimum necessary standards.\nCollaborate with HR and Finance on benefits regulatory updates from DOL, IRS, and HHS that affect plan design and administration.\nGeneral Compliance Program Leadership\nDevelop, maintain, and continuously improve the enterprise compliance program, including risk assessments, policies, procedures, internal controls, and monitoring activities.\nReport regularly to executive leadership and the Board on compliance risk, program effectiveness, and emerging regulatory developments.\nBuild and manage a high-performing compliance function; provide direct supervision of the Safety Manager and IT Administrator, and establish clear roles, responsibilities, and development plans for all direct reports and external compliance partners.\nManage external legal counsel, compliance consultants, and related vendors; oversee compliance program budgets and resource allocation.\nLead internal compliance investigations, root cause analyses, and corrective action plan implementation.\nMaintain the compliance regulatory calendar and ensure timely submission of all mandatory filings and certifications.\nQualifications & Experience:\nRequired:\nBachelor’s degree in Law, Business Administration, Political Science, Engineering, or a related field; J.D. or advanced degree strongly preferred.\nMinimum 10 years of progressive compliance or regulatory experience, with at least 5 years in a leadership role within a defense or aerospace environment.\nSecret (TS/SCI Preferred)\nDemonstrated expertise in ITAR/EAR export controls, NISPOM/industrial security, and CMMC/NIST 800-171 cybersecurity frameworks.\nActive DoD security clearance (Secret minimum); TS/SCI eligibility preferred.\nProven experience managing ethics programs, hotline operations, and internal compliance investigations.\nWorking knowledge of HIPAA, ERISA, ACA, and employee benefits compliance requirements.\nStrong understanding of FAR/DFARS, government contracting requirements, and False Claims Act exposure.\nExceptional written and oral communication skills with the ability to present complex regulatory topics to executive leadership and non-technical audiences.\nPreferred:\nCertified Compliance & Ethics Professional (CCEP) or Certified Export Compliance Officer (CECO) designation.\nFSO certification through DCSA or equivalent industrial security training credential.\nExperience registered as an Empowered Official with DDTC, or demonstrated ability to oversee and manage an EO function through an external resource.\nCMMC Registered Practitioner (RP) or Certified Professional (CP) designation.\nExperience operating within a DCAA-audited environment with familiarity with Cost Accounting Standards (CAS).\nPrior experience with AS9100 quality management system compliance in an aerospace context.\nMBA or advanced degree.\nPhysical Requirements:\nProlonged periods of sitting at a desk and working on a computer.\nFrequent use of hands and fingers for typing, writing, and operating office equipment.\nAbility to communicate verbally and in writing with internal and external stakeholders.\nRegular standing and walking, including within manufacturing, warehouse, and production floor environments.\nAbility to move throughout production facilities to observe operations, conduct compliance reviews, and engage with cross-functional teams.\nOccasional bending, reaching, and stooping.\nAbility to lift and carry up to 20 pounds occasionally (e.g., documents, binders, equipment).\nAbility to wear required personal protective equipment (PPE) when entering manufacturing or regulated production areas.\nVisual acuity sufficient to review detailed reports, regulatory documents, contracts, and operational metrics.\nAbility to travel domestically (and internationally, if applicable) for government agency visits, audit support, site reviews, and industry conferences.\nBenefits Overview: \nHeven AeroTech offers a competitive benefits package designed to support the health, financial security, and overall well-being of our employees and their families. Benefits include medical, dental, and vision coverage, retirement plans, paid time off/sick, and additional protections such as critical illness, hospital indemnity, accident coverage, and short- and long-term disability.\nEqual Employment Opportunity Statement: \nHeven AeroTech is an Equal Opportunity Employer and considers all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic under applicable law.\nPosted Salary Range:\n$150,000—$200,000 USD","description_format":"text","description_chars":11360,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Military","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-11T17:59:22Z"}],"liveness":{"score":38,"band":"fade","label":"Fading","p_open":1,"p_active":0.86,"p_room":0.44,"age_days":72,"expected_fill_days":63,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-09-24T05:45:00Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":false},"html_url":"https://alion.io/job/hevenaerotech-director-of-compliance","json_url":"https://alion.io/job/hevenaerotech-director-of-compliance.json","meta":{"generated_at":"2026-09-25T03:33:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":3944,"day_limit":5000,"remaining_today":1056,"minute_limit":60,"resets_at":"2026-09-26T00:00:00Z"}}}