Lead and develop the security governance, risk, and compliance organization, including FedRAMP, SOC 2, and PCI DSS programs.
Own security risk management, third-party risk, and customer assurance, evaluating technical and contractual security requirements.
Drive program maturity and scalability, identifying emerging risks and translating them into actionable organizational plans.
SentiLink helps institutions and protects customers by accurately resolving identities and flagging fraud risk. The company is well capitalized, growing quickly, and serves 13 of the top 15 U.S. banks.
Conduct comprehensive assessments of security controls and enhancements to ensure they meet NIST and federal requirements.
Develop and execute Security Controls Test (SCT) plans, including vulnerability scans and penetration testing aligned with DHS RVA standards.
Prepare security assessment reports, POA&M inputs, and risk ratings to support authorization decisions.
SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. The company is an ISO-certified, CMMI Level 3 small business that fosters a collaborative culture built on individual performance and accountability.
Lead the development and implementation of comprehensive security programs for a large-scale multi-tenant cloud ecosystem.
Oversee risk assessments, incident response, and compliance with frameworks like FedRAMP, FISMA, and NIST SP 800-53.
Collaborate with cross-functional teams and serve as the primary point of contact for government leadership.
Peraton is a next-generation national security company that drives missions of consequence globally. As the world's leading mission capability integrator, they deliver trusted solutions to protect the nation and allies, employing a large workforce dedicated to solving daunting challenges.
Provide technical expertise on security control implementations and development of Information Security procedures for cloud systems.
Perform detailed architecture and technical design reviews on the full stack for vendor solutions.
Conduct comprehensive reviews of CSPs' assessments and package submissions to advise on risk posture and compliance.
Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. The company has been named one of the Best Places to Work in the Washington DC area 12 years in a row and holds CMMI, CMMC, and ISO certifications.
Own physical construction and accreditation requirements for defense Galleons, including SCIFs and SAPFs under ICD 705, DoDM 5205.07, and NISPOM.
Translate security standards into repeatable design criteria, drawing notes, BOM constraints, and factory work instructions for cross-functional teams.
Serve as the company authority on physical security for secure builds, liaising with Accrediting Officials and DCSA representatives through accreditation.
Armada is the hyperscaler for the edge, delivering modular AI infrastructure from first deployment to AI factory with speed, scale, and sovereignty. With nearly $500 million in funding and deployments in over 60 countries, Armada is backed by leading investors and builds a culture of ownership, autonomy, and impact.
Develop and maintain the information security internal audit program, aligning with FedRAMP and CMMC.
Own monthly continuous monitoring assessments and serve as a technical point of contact during audits.
Build automated evidence collection and policy-as-code checks across cloud and CI/CD systems.
Everbridge helps enterprises and government organizations prepare for, respond to and recover from critical events. This role is fully remote, and the company emphasizes collaboration, compliance, and technical excellence across its teams.
Lead external compliance exams (SOC 2, ISO 27001) end-to-end, including evidence, auditor negotiation, and readiness.
Own customer security diligence, questionnaires, audits, and trust-center content while setting response standards.
Manage third-party risk operations and the agent platform for automated customer and vendor assessments.
Chainguard provides hardened, secure, and production-ready builds of open source software, helping organizations build faster, stay compliant, and eliminate risk. It is a venture-backed company serving Fortune 500 enterprises and global industry leaders like OpenAI and Snowflake.
Lead the implementation and certification of Accela's ISO/IEC 27001:2022 program.
Manage risk assessments, controls, audits, and compliance documentation across cross-functional teams.
Drive compliance automation and evidence management using platforms like Drata.
Accela provides a cloud-based government software platform that helps agencies improve efficiency and transparency. For nearly 20 years, it has been an industry leader serving communities of all sizes, with a culture committed to diversity, equity, and inclusion.
Conduct security assessments for FedRAMP, PCI, ISO, CMMC, and NIST frameworks.
Collaborate with delivery team members to drive customer satisfaction and meet project deliverables.
Perform technical tests, document results, and maintain work papers.
Fortreum is a trusted leader in cloud and cybersecurity services, specializing in FedRAMP and other regulatory compliance assessments. The company is rapidly growing and values quality, customer focus, autonomy, and personal accountability.
Lead end-to-end incident response, threat hunting, and root cause analysis across SIEM, EDR, and cloud security tooling.
Own vulnerability management lifecycle, conduct risk assessments, and enforce security controls on identity and endpoint platforms.
Automate detection and response workflows, drive AI security governance, and support compliance audits.
Abby Care builds an AI-native platform to enable family caregivers and improve home care outcomes. It is a startup backed by top VCs, with a culture emphasizing families first, urgency, resourcefulness, and positivity.
Implement security strategies tailored to cloud environments like AWS, GCP, and Azure.
Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure.
Prepare security compliance reports and execute Security Controls Test plans for ATO requests.
SkyePoint Decisions is a cybersecurity architecture and engineering, IT services provider supporting federal government clients. It is an ISO-certified small business with a collaborative culture that values flexibility and professional development.
Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.
Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.
Conduct security architecture reviews and risk assessments for proposed IT solutions.
Evaluate designs to identify security risks, threats, and gaps in controls.
Act as a trusted security advisor to technical teams and leadership.
Kyndryl runs and reimagines mission-critical technology systems for the world's leading businesses. It has a global workforce and a culture focused on flexibility, support, and well-being.
Partner with business leaders to translate priorities into practical security and risk decisions.
Lead project security assessments, rapid risk reviews, and remediation planning for new products and enterprise changes.
Communicate threats, incidents, and policy changes to leadership using a threat-informed, business-aligned approach.
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We have an amazing team of 25,200 people in 32 countries and invest in new advanced technologies to unlock the power of data.
Design, implement, and maintain the Security Operations Center (SOC) and related ISMS processes.
Manage incident response, threat intelligence, vulnerability management, and patch management.
Lead and develop the SOC team, ensuring continuous improvement of security operations.
ELEKS is a software development company providing custom solutions and services. With a global team of over 2,000 professionals, they foster a culture of innovation and collaboration.
Own and drive the SOC 2 compliance program, including annual audits and certification.
Manage the risk register, vendor risk, BCP/DR, and policy lifecycles.
Lead customer security reviews and respond to complex security questionnaires.
Bluesight creates groundbreaking solutions that increase efficiency, safety, and visibility for health systems, hospital pharmacies, and pharmaceutical manufacturers. It is a high-growth healthcare IT company with a start-up vibe and over 3,000 customers.
Lead end-to-end compliance efforts for U.S. Federal customers, including readiness assessments, audits, and continuous monitoring.
Serve as the compliance lead for federal authorization efforts, including Agency ATOs, FedRAMP initiatives, and security assessments.
Drive adoption of continuous compliance automation and cross-functional program leadership across engineering, cloud, and security teams.
Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. The company values curiosity, dedication, and innovation, fostering a culture built on diversity, inclusion, and respect.
Provide advanced remote technical support for integrated security systems, serving as the escalation point for complex issues.
Lead troubleshooting across enterprise, multi-site, and mission-critical environments as a subject matter expert.
Develop and recommend troubleshooting procedures, knowledge articles, and support best practices, while mentoring junior engineers.
Unlimited Technology is a premier cyber and physical security specialty contractor delivering cutting-edge technology solutions to leading brands and critical infrastructure. The company is growing rapidly and fosters a culture of Passion, Collaboration, Innovation, and Adaptability.
Perform activities to measure and monitor compliance with company policies and procedures.
Facilitate certifier requests and information gathering for external and internal audits.
Lead onsite and remote audits, both certification and customer audits, to ensure compliance.
ServiceNow provides the AI control tower for business reinvention, bringing together AI, data, and workflows to help 85% of the Fortune 500 work smarter, faster, and better. The company fosters an AI-native culture where technology and talent are unstoppable together, with a large global employee base.
Own corporate security and identity infrastructure, including Google Workspace, SSO/SCIM, MDM/EDR, and access reviews.
Lead security compliance programs like SOC 2, manage customer security reviews, and maintain incident response.
Collaborate with managed IT partners, vendors, and auditors to keep security priorities working and risks managed.
Sofar Ocean is building the world's largest real-time ocean sensor network, using Spotter buoys and software like Wayfinder to turn ocean data into decisions for shipping, government, and defense customers. The company is a team of about 100 based in San Francisco and is growing fast.