Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.
Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.
Support federal certification and authorization by coordinating compliance assessments with stakeholders.
Drive continuous monitoring through remediation and ongoing compliance obligations.
Develop scalable compliance processes to enable business growth.
Zscaler provides a cloud security platform that protects customers from cyberattacks and data loss. The company has a global presence with 200+ data centers and fosters a collaborative, AI-native culture.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
Own the day-to-day operation and continuous improvement of ISO 27001, SOC 2, and GDPR compliance programs.
Lead the pursuit of CMMC certification, agency-specific ATOs, and NIST SP 800-171 compliance.
Serve as the organization's DPO and oversee vendor risk, audits, and security awareness training.
Mechanical Orchard specializes in safely rewriting the most critical and complex business applications to make them adaptable and resilient. The company is an experienced Agile software consultancy that values cross-functional teams, collective ownership, and continuous improvement, and is bringing joy to beleaguered IT teams.
Support compliance and risk assessments for cloud-based and classified information systems in line with federal standards.
Prepare and maintain RMF documentation, including SSPs, POA&Ms, and continuous monitoring reports.
Collaborate with engineering teams and external assessors to achieve and maintain system authorizations.
This is for a partner company that protects cloud-based and classified information systems for federal agencies. It maintains a collaborative, security-focused culture with experienced professionals and government stakeholders.
Lead security authorization activities and maintain ATO documentation for federal programs.
Conduct risk assessments, monitor compliance with NIST SP 800-53 and FISMA, and implement remediation strategies.
Oversee security posture across multiple information systems while collaborating with federal stakeholders.
Jobgether is a company that uses AI-powered matching to connect candidates with job opportunities. The company partners with hiring employers and manages applications through a remote, inclusive environment that values military experience.
Conduct security assessments for FedRAMP, PCI, ISO, CMMC, and NIST frameworks.
Collaborate with delivery team members to drive customer satisfaction and meet project deliverables.
Perform technical tests, document results, and maintain work papers.
Fortreum is a trusted leader in cloud and cybersecurity services, specializing in FedRAMP and other regulatory compliance assessments. The company is rapidly growing and values quality, customer focus, autonomy, and personal accountability.
Take primary responsibility for overseeing PlanetScale's FedRAMP readiness and ATO process from start to finish.
Act as the main compliance point of contact for all audits/assessments, including SOC 1 & 2, PCI, and FedRAMP, from preparation through external walkthroughs.
Establish, track, and report on key performance indicators and maturity metrics for audit and compliance programs.
PlanetScale offers developers the fastest and most reliable Postgres and Vitess/MySQL databases, enabling businesses to handle data and workloads of all sizes. Backed by over $100M in venture financing and serving innovative companies like Block and Etsy, PlanetScale is a profitable, fast-growing company that builds small teams of top-tier individuals.
Lead technical federal compliance programs including CMMC, FedRAMP, and NIST 800-171 for government contractors.
Manage a small team of Security Analysts, driving performance through coaching, accountability, and high-quality outcomes.
Build and maintain client security programs, conduct gap/risk assessments, and manage external audits like CMMC and FedRAMP.
Founded in New York City in 2015, Rhymetec specializes in compliance, cybersecurity, and data privacy, helping clients build effective infosec programs. The company operates remotely across the United States and emphasizes professional development and a collaborative culture.
Lead and develop the security governance, risk, and compliance organization, including FedRAMP, SOC 2, and PCI DSS programs.
Own security risk management, third-party risk, and customer assurance, evaluating technical and contractual security requirements.
Drive program maturity and scalability, identifying emerging risks and translating them into actionable organizational plans.
SentiLink helps institutions and protects customers by accurately resolving identities and flagging fraud risk. The company is well capitalized, growing quickly, and serves 13 of the top 15 U.S. banks.
Serve as the primary customer-facing lead for CMMC Level 1 and Level 2 engagements from scoping through assessment.
Author System Security Plans, policies, and evidence libraries; implement technical controls in customer tenants.
Assess finished environments against the CMMC Level 2 Assessment Guide and support customers during C3PAO assessments.
Defense Unicorns delivers mission value by streamlining software delivery so customers can focus on the most important challenges. Their team is composed of innovators, software engineers, and veterans with decades of experience in federal technology.
Perform activities to measure and monitor compliance with company policies and procedures.
Facilitate certifier requests and information gathering for external and internal audits.
Lead onsite and remote audits, both certification and customer audits, to ensure compliance.
ServiceNow provides the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter, faster, and better. The company fosters an AI-native culture where technology and talent are unstoppable together, with a large global employee base.
You will conduct security control testing and evaluations across SOC 2, ISO 27001, and PCI DSS frameworks.
You will coordinate evidence collection and technical walkthroughs with Engineering, DevOps, IT, and system owners.
You will identify control gaps, assess risks, and support remediation plans in the GRC platform.
Jobgether is an AI-powered job matching platform that connects candidates with hiring companies through objective, skills-based reviews. It operates with a remote-first approach and uses technology to streamline recruitment and improve hiring outcomes.
Own the end-to-end continuous control monitoring program across cloud, identity, code, and endpoint systems.
Build centralized common controls frameworks and automated evidence management using Python, APIs, and policy-as-code.
Provide technical leadership during audits and collaborate with security teams to modernize GRC through automation and AI-assisted workflows.
The company is a technology organization focused on secure and compliant cloud operations. It is a globally distributed, remote-first team that emphasizes collaboration, ownership, and professional growth.
Coordinate the execution of GovRAMP compliance initiative, managing project plans, milestones, timelines, and deliverables.
Facilitate cross-functional collaboration across Security, Engineering, IT, Compliance, and external partners.
Maintain project dashboards, status reports, and risk registers to ensure timely escalation and resolution.
Radicle Health is a collection of human services software products designed to foster collaboration and innovation, helping organizations better serve their communities. The company is mission-driven, with a culture where employees feel ownership, celebrate wins, and grow together.
Conduct proactive technical security assessments, hunt for threats, and review indicators of compromise in response to security incidents.
Design and implement security controls aligned with NIST, FISMA boundary management, and Defense Industrial Base frameworks.
Develop and maintain security documentation for ATOs and audit reports while collaborating with cross-functional teams on compliance.
TP is a leading global provider of digital business services, partnering with prominent brands to optimize operations through advanced technology and sustainable practices. With a global workforce of 500,000 across 300 languages, we foster a culture of inclusion and diversity where ambition and high performance lead to long-term success.
Maintain RMF authorization packages, security-control implementation statements, and continuous-monitoring evidence.
Support ATO/ATC package reviews, security-control testing, and Security Test and Evaluation planning.
Coordinate with ISSMs, system owners, and assessors to resolve comments and maintain traceable authorization documentation.
DecisionPoint Corporation is a professional services firm supporting federal and Department of Defense programs. It offers careers in cybersecurity, IT, and management consulting with an emphasis on mission-driven work and equal employment opportunity.
Monitor and triage security alerts, coordinate incident response, and run tabletop exercises.
Maintain technical security controls including encryption, key/certificate management, and secrets rotation.
Support SOC 2 and GDPR compliance through vendor reviews, client questionnaires, and evidence collection.
Graphite is a technology-enabled growth agency that helps fast-growing companies like Masterclass, Notion, and BetterUp unlock sustainable revenue through content, SEO, and AEO. We are a fully distributed team across North America, Latin America, and Europe, obsessed with impact and delivering outcomes for clients.
Plan, implement, and maintain all phases of the Risk Management Framework (RMF) for assigned systems.
Develop and maintain security documentation including SSPs, SARs, and POA&Ms while collaborating with the ISSM and stakeholders.
Ensure compliance with DoD and DoN cybersecurity policies and provide security guidance and training to system users.
Falconwood, Inc. is a small, woman/veteran-owned business providing executive-level consultants and programmatic support to Department of Defense IT initiatives. The company supports the full lifecycle of IT systems and applications, and offers a dynamic team environment with daily challenges.