Senior Compliance Program Manager, GRC (Cybersecurity)

Location: 100% remote from select US locations, with a hybrid option for candidates in the Chicago, IL or El Dorado Hills, CA metro areas.

Company

hirify.global develops cybersecurity software, including an AI-enabled, cloud-native privileged access management platform used by organizations and public-sector customers in more than 150 countries.

What you will do

• Manage compliance programs across audit cycles, continuous monitoring, POA&M remediation, policy governance, and supporting documentation.
• Coordinate scope, milestones, dependencies, evidence collection, control-owner activities, risks, and reporting across Security, Engineering, DevOps, IT, and GRC.
• Support FedRAMP High, DoD IL5, NIST 800-53, SOC 2, ISO 27001, and PCI DSS compliance activities.
• Develop and mature third-party risk management, including vendor assessments, risk registers, remediation tracking, and supply chain risk reviews.
• Author and govern information security policies, standards, procedures, control narratives, System Security Plans, and other audit-ready documentation.
• Develop security training, manage its lifecycle and evidence, measure effectiveness, and use AI-assisted tools to improve research, documentation, analysis, and workflows.

Requirements

• 6+ years of experience in information security compliance, governance, risk, audit, program management, or a related field.
• 3+ years leading audits, assessments, or compliance initiatives involving NIST 800-53, FedRAMP, SOC 2, ISO 27001, or similar frameworks.
• Experience with regulated or federal cloud environments, authorization documentation, POA&Ms, continuous monitoring, and third-party risk management.
• Strong program management, documentation governance, stakeholder communication, and ability to influence cross-functional partners without direct authority.
• Experience developing security policies, procedures, training, and clear operational guidance for technical and non-technical audiences.
• Bachelor’s degree or equivalent practical experience, plus a relevant certification such as PMP, CISSP, CISA, CISM, CRISC, CGRC, or ISO 27001 Lead Auditor.

Nice to have

• Direct FedRAMP High or DoD IL5 authorization and continuous monitoring experience.
• Experience with NIST 800-53 AT controls, role-based security training, phishing simulations, learning management systems, or compliance automation platforms.
• Experience with supply chain risk management, vendor security assessments, federal contract requirements, or customer-facing security responses.

Culture & Benefits

• Fully remote work from select US locations, with a hybrid option in specified metro areas.
• Medical, dental, and vision insurance, including domestic partnerships.
• Employer-paid life insurance and supplemental life insurance options.
• Roth or traditional 401(k), generous PTO, and paid bereavement and jury duty leave.
• Above-market annual bonuses.