Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.
Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.
Establish and enforce a unified security posture across GCP and OCI, including guardrails, IAM policies, and centralized monitoring.
Validate cloud deployments meet FedRAMP High, FISMA, and NIST 800-53 requirements, working with governance and audit teams.
Identify vulnerabilities, policy deviations, and architectural risks, and drive remediation.
Latitude is a growing Service-Disabled Veteran Owned company within the Federal Sector, working with various federal clients across multiple agencies. They foster a remote work-from-home culture, invest in employee growth, and strive for innovation to break through technology and government barriers.
Drive end-to-end audit cycles for SOC 2 Type II and ISO 27001/27701/42001, including evidence collection, control testing, auditor liaison, and remediation tracking.
Support FedRAMP program efforts, vendor risk assessments, and customer security assurance.
Automate compliance processes using Tines and operate continuous control monitoring.
Tines is the intelligent workflow company that powers important workflows by integrating with any API-enabled service for IT and security teams. The company values Simplicity, Speed, and Soundness, fostering a culture of curiosity, growth, and integrity.
Perform activities to measure and monitor compliance with company policies and procedures.
Facilitate certifier requests and information gathering for external and internal audits.
Lead onsite and remote audits, both certification and customer audits, to ensure compliance.
ServiceNow provides the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter, faster, and better. The company fosters an AI-native culture where technology and talent are unstoppable together, with a large global employee base.
Lead and mature the organization's governance, risk management, compliance, and audit programs.
Own cybersecurity compliance initiatives including CMMC Level 2, SOC audits, and SOX IT General Controls.
Partner with business, technology, and executive stakeholders to align security controls with regulatory and business requirements.
Loenbro is a trusted construction lifecycle partner serving thousands of customers across the U.S. with services including electrical, mechanical, structural, inspection, and fabrication. The company has a national presence with a local approach and fosters a culture of integrity, teamwork, and purpose.
Own the day-to-day operation and continuous improvement of ISO 27001, SOC 2, and GDPR compliance programs.
Lead the pursuit of CMMC certification, agency-specific ATOs, and NIST SP 800-171 compliance.
Serve as the organization's DPO and oversee vendor risk, audits, and security awareness training.
Mechanical Orchard specializes in safely rewriting the most critical and complex business applications to make them adaptable and resilient. The company is an experienced Agile software consultancy that values cross-functional teams, collective ownership, and continuous improvement, and is bringing joy to beleaguered IT teams.
Own and mature security, privacy, and compliance programs across HIPAA, SOC 2, and HITRUST.
Lead HITRUST certification end to end, including scoping, evidence collection, and assessor coordination.
Partner with Engineering, Product, SRE, and IT to integrate security into architecture, SDLC, and cloud infrastructure.
IntusCare is an end-to-end ecosystem built specifically to help PACE programs deliver exceptional care, strengthen financial performance, and stay compliant. It is a growing healthcare SaaS organization that empowers teams to improve outcomes for dual-eligible seniors.
Act as the subject matter expert for Wiz's FedRAMP and DoD IL4/5 offerings, translating product value to internal and external stakeholders.
Engage with federal customers and mission owners to capture requirements, manage expectations, and support compliance processes.
Partner with Product and PMM to maintain the Wiz4Gov roadmap and prioritize features essential for U.S. Public Sector compliance.
Wiz is a cloud security company that connects code, cloud, and runtime into a single context to secure cloud and AI applications. It is one of the fastest-growing startups, trusted by over 65% of the Fortune 100, and offers a culture that values world-class talent and creative freedom.
Own the end-to-end continuous control monitoring program across cloud, identity, code, and endpoint systems.
Build centralized common controls frameworks and automated evidence management using Python, APIs, and policy-as-code.
Provide technical leadership during audits and collaborate with security teams to modernize GRC through automation and AI-assisted workflows.
The company is a technology organization focused on secure and compliant cloud operations. It is a globally distributed, remote-first team that emphasizes collaboration, ownership, and professional growth.
Improve cloud security posture through practical, scalable policy engineering.
Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.
UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.
Own and mature internal and Managed GRC programs, including federal SSPs, POA&Ms, audits, and risk assessments.
Collaborate with CISOs, engineers, and control owners to translate compliance requirements into practical technical controls.
Lead and develop a GRC team while introducing automation and AI to improve scalability and consistency.
The company provides managed Governance, Risk & Compliance (GRC) and security assurance services, with a strong focus on federal security programs and frameworks like NIST, SOC 2, and CMMC. It supports a growing GRC team and emphasizes low-ego collaboration, automation, and AI-enabled approaches to scale delivery.
Implement and maintain AWS security configurations across development, staging, and production environments.
Operate SAST, DAST, and SCA tools integrated into CI/CD pipelines to remediate vulnerabilities.
Support compliance efforts such as SOC 2 Type II and ISO 27001 audits and improve security processes.
Pacvue is a leading software suite for eCommerce advertising, sales, and intelligence, helping brands grow on Amazon, Walmart, Instacart, and other marketplaces. The team is energetic, passionate, and focused on innovation, with a mission to help brands and sellers succeed.
Own global certification programs like ISO 27001 and SOC 2, and advise engineering teams on secure development.
Collaborate directly with engineers to audit cloud infrastructure, CI/CD pipelines, and AI-driven security controls.
Assess risks of emerging technologies and drive continuous compliance improvements across the organization.
Picus Security is an exposure validation company that proves what attackers can exploit and what defenses stop, turning exposures into defensible decisions. As a fast-growing global remote team, it values continuous security validation and has a 95% recommendation rate.
Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.
Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.
Maintain and enhance Anovia's ISO/IEC 27001 ISMS, including policies, controls, risks, and audit coordination.
Support SOC 2, HIPAA, and other compliance programs, including vendor assessments, vulnerability management, and incident response.
Lead ambiguous technical and operational initiatives from planning through implementation, coordinating stakeholders and driving completion.
Anovia is an industry-leading technology outsourcing support provider specializing in workflow and knowledge processes, technical support, helpdesk, and multilingual services. With over 200 experts globally, we serve Fortune 500 companies and value growth, learning, and work-life balance.
Lead and mature cybersecurity compliance programs including SOC 2 Type 2 and ISO 27001 readiness.
Drive cloud and application security across AWS and Azure, integrating secure SDLC and DevSecOps practices.
Manage corporate IT operations, identity and access, and build the cybersecurity team as the organization grows.
Genea is a leader in property technology, providing cloud-based physical security, submeter billing, and on-demand HVAC solutions to over 1 million users across 39 countries. It has been recognized as a Top Workplace from 2021-2025 with a 4.3 Glassdoor rating, fostering a team-oriented and transparent culture.
Own and drive Sourcegraph's governance, risk, and compliance program, including SOC 2 and ISO 27001 certifications.
Manage audits end-to-end: evidence collection, control testing, stakeholder coordination, and remediation.
Support customer-facing compliance activities and tailor controls to fit Sourcegraph's fast-moving environment.
Sourcegraph builds AI-powered code search and batch change tools for engineering teams to manage complex codebases. It is a globally distributed team backed by a16z, Sequoia, and Redpoint, valuing high agency and customer love.
Actively participate in ISO 27001/27701, ISO 42001, SOC 2, and PCI DSS audits from a technical perspective.
Translate security, compliance, and privacy requirements into scalable, enforceable, and auditable technical controls.
Develop internal security tooling using Python and implement cloud security controls across AWS and GCP.
Yuno builds payment infrastructure that enables companies to participate in the global market through seamless integrations and over 1,000 payment methods. Founded by payments and tech industry experts, it empowers high-performing teams at brands like InDrive, McDonald’s, Rappi, and Viva Aerobus.
Support day-to-day execution of IT risk, compliance, privacy, and governance programs.
Review client agreements and security questionnaires, coordinating redlines with legal.
Manage control evidence, vendor risk, data retention, and compliance policies.
Our partner provides IT risk, compliance, privacy, and governance services for clients. They have a small, collaborative team and value diverse perspectives and authentic contributions.
Conduct cybersecurity risk assessments and compliance reviews to identify gaps and remediation needs.
Support internal and external audits against Federal requirements and organizational policies.
Develop and maintain cybersecurity policies, procedures, and compliance documentation.
PingWind is a Service-Disabled Veteran-Owned Small Business that delivers cybersecurity, IT infrastructure, supply chain management, and professional services to the federal government. As a small business with offices in Northern Virginia and Huntsville, AL, PingWind fosters a dynamic team environment focused on supporting large government clients.