This is a fully remote position, open to applicants in Texas.

📋 Description

• Oversee the four functional leads — GRC, AppSec, Cloud/Vulnerability, and SecOps — by establishing priorities, eliminating obstacles, and ensuring accountability for delivery.

• Manage the operational roadmap for SOC 1 and SOC 2, which includes continuous evidence collection, identifying control owners, and ensuring audit readiness in preparation for annual audits.

• Lead the FedRAMP High authorization initiative and the concurrent GovRAMP pursuit — both extensive, multi-year programs (with FedRAMP High typically spanning 12–24 months and costing between $500K and $1M+) — by converting authorization requirements into actionable workstreams, milestones, and designated owners.

• Provide updates on program status, risks, and resource requirements to the CISO with sufficient detail to facilitate executive and board reporting.

⛳️ Requirements

• A minimum of 10 years in information security, including at least 4 years in direct management of security teams or functional leads.

• Proven experience navigating at least one SOC 2 or SOC 1 audit cycle and one PCI DSS assessment cycle in the capacity of a control owner or program lead.

• Strong preference for candidates with experience in FedRAMP or GovRAMP authorization processes — including control implementation, SSP development, or support for 3PAO assessments.

• Familiarity with vulnerability management platforms (such as Tenable) and WAF/cloud security tools is an additional advantage.