Compliance & Security Manager

Essential Functions:

• Maintain a thorough understanding of the Texas Compassionate Use Program (CUP), Texas Department of Public Safety (DPS) Administrative Rules, and other applicable state and federal regulations governing medical cannabis operations. 

• Monitor regulatory changes and implement updates to company policies, SOPs, and operational practices. 

• Ensure ongoing compliance across cultivation, manufacturing, laboratory, fulfillment, transportation, and retail operations. 

• Maintain all required compliance documentation, records, licenses, registrations, permits, and inspection files. 

• Coordinate regulatory reporting, submissions, renewals, and correspondence with the Texas Department of Public Safety and other regulatory agencies. 

• Lead internal compliance audits and facility inspections to proactively identify regulatory gaps and operational risks. 

• Develop, implement, and monitor corrective and preventive action (CAPA) plans resulting from audits, inspections, or investigations. 

• Support and coordinate all regulatory inspections and serve as a primary point of contact for regulators during site visits, and maintain inspection readiness across all licensed locations. 

• Own the company's DEA registration compliance: registration file maintenance, initial inventory upon registration grant, biennial inventories, and federal recordkeeping under 21 CFR Parts 1301/1304. 

• Implement DEA-conformant employee screening procedures (21 CFR 1301.90) and security controls. 

• Report theft or significant loss to DEA (Form 106) and DPS within required timelines — the JD says "regulatory agencies" generically; name the federal obligation. 

• Serve as point of contact for DEA inspections alongside DPS. 

• Oversee the company's physical security program, including access control systems, employee credentialing, visitor management, restricted access areas, key control, and security badge administration. 

• Oversee CCTV surveillance, alarm systems, intrusion detection, and security monitoring to ensure continuous compliance with regulatory requirements, coordinating testing, maintenance, and upgrades with Facilities, IT, and vendors. 

• Develop and maintain security procedures that protect employees, patients, products, cash, intellectual property, and company assets; conduct periodic security risk assessments. 

• Review surveillance footage and access logs as needed to investigate incidents or verify compliance, and ensure secure storage, handling, transportation, and destruction of cannabis products. 

• Lead investigations involving diversion, theft, inventory discrepancies, unauthorized access, policy violations, workplace misconduct, security breaches, or other compliance concerns. 

• Collect and preserve evidence, review surveillance footage, interview witnesses, prepare detailed investigative reports, and maintain confidential investigation files. 

• Ensure all reportable incidents are documented and reported to regulatory agencies within required timelines; track investigation outcomes and implement corrective actions. 

• Develop, maintain, and continuously improve compliance and security policies, SOPs, and work instructions in partnership with department leaders. 

• Develop and facilitate employee training on regulatory compliance, facility security, diversion prevention, incident reporting, access control, and confidentiality; monitor completion and maintain training records. 

• Identify regulatory, operational, and security risks and develop mitigation strategies; develop KPIs for compliance and security programs and recommend process improvements. 

Additional Responsibilities:

• Partner with Operations, Manufacturing, Cultivation, Retail, Facilities, Human Resources, IT, Finance, and Quality to ensure compliance requirements are integrated into day-to-day operations. 

• Support new facility openings, renovations, operational changes, and expansion initiatives from a compliance and security perspective. 

• Participate in cross-functional projects involving regulatory implementation, process improvement, and operational excellence. 

• Build positive working relationships with regulatory agencies, law enforcement, security vendors, and external auditors. 

• Assist with business continuity planning, emergency response procedures, and crisis management activities. 

• Travel Requirements: Ability to travel between company locations throughout Texas as needed. 

• Availability to respond to after-hours security or compliance incidents when necessary. 

What you need to succeed:

• Bachelor's degree in Criminal Justice, Business Administration, Public Administration, Regulatory Affairs, Security Management, or a related field; equivalent experience may be considered. 

• Five (5) or more years of progressively responsible experience in regulatory compliance, corporate security, risk management, investigations, or a related function. 

• Minimum three (3) years of leadership or supervisory experience. 

• Experience working in a highly regulated industry such as medical cannabis, pharmaceuticals, healthcare, food manufacturing, biotechnology, or similar regulated environments. 

• Strong understanding of compliance management systems, investigations, audit methodologies, and risk assessment. 

• Experience managing CCTV systems, access control systems, alarm monitoring, and physical security programs. 

• Demonstrated ability to interpret regulations and translate requirements into practical operational procedures. 

• Strong analytical, organizational, communication, and problem-solving skills, with the ability to manage confidential information with discretion and professionalism. 

• Proficiency with Microsoft Office Suite and experience using compliance management or incident tracking software. 

• Preferred: Experience with the Texas Compassionate Use Program (CUP) and Texas Department of Public Safety regulations. 

• Preferred: Professional certifications such as CCEP, CPP, PSP, PCI, CFE, or similar; experience supporting multi-site operations and electronic surveillance/access control platforms. 

• Physical Demands: Ability to walk manufacturing, cultivation, warehouse, and retail facilities for extended periods and occasionally lift up to 25 pounds.