Technical Program Manager (GRC)

Location: Hybrid role with in-office and/or in-person expectations in Morrisville, North Carolina, or the RTP, Boston, and Waltham areas, United States

Salary: 129,200–192,500 USD annually, based on on-target earnings

Company

hirify.global provides enterprise-grade data infrastructure, cloud storage, integrated data services, and solutions for traditional workloads and enterprise AI across Google Cloud, AWS, and Microsoft Azure.

What you will do

• Design, maintain, and improve compliance programs supporting ISO/IEC 27001, SOC 2, PCI DSS, NIST, and FedRAMP assessments and certifications.
• Perform technical gap and risk assessments across infrastructure, applications, and cloud engineering processes, and drive remediation.
• Translate regulatory and compliance controls into measurable engineering and security requirements.
• Partner with Engineering, SRE, Product, Cloud Security, Legal, Privacy, and Corporate Security to automate detection, remediation, evidence collection, and continuous monitoring.
• Apply AI and related tooling to improve compliance workflows and manage GRC initiatives through completion.
• Coordinate with AWS, Microsoft Azure, and Google Cloud partners, auditors, and assessors while presenting the technical security posture to senior stakeholders.

Requirements

• 6+ years of experience building and managing security risk and compliance programs, including large cross-functional programs through certification.
• Deep knowledge of ISO/IEC 27001, SOC 2, PCI DSS, NIST, and FedRAMP, with the ability to convert controls into engineering requirements.
• Strong technical fluency in AWS, Azure, Kubernetes, containers, virtual machines, identity and access control, network security, cryptography, logging, monitoring, incident response, DevOps, and CI/CD.
• Experience partnering with engineering teams to deliver technical outcomes and influence senior stakeholders and external partners without direct authority.
• Familiarity with cloud security capabilities, SIEM, vulnerability scanning, cloud security posture management, and endpoint detection and response.
• Bachelor’s or Master’s degree in engineering, computer science, information technology, or a related field, or equivalent professional experience.

Nice to have

• Experience with FedRAMP, GovRAMP, CMMC, CJIS, NIST 800-53, or NIST 800-171.
• Experience applying AI or large language model tooling to compliance workflows, including familiarity with NIST AI RMF or ISO/IEC 42001.
• Professional certifications such as CISA, CISSP, CRISC, CCSK, CCSP, CIPP, AWS certifications, or ISO 27001 Lead Implementer or Lead Auditor.

Culture & Benefits

• Hybrid working environment with flexibility and some level of in-office or in-person collaboration.
• Benefits may include health insurance, life insurance, retirement or pension plans, paid time off, leave options, employee stock purchase plans, and restricted stock units, subject to regional policies.
• Culture emphasizing initiative, ownership, impact, problem solving, inclusion, and work-life balance.
• Some hiring stages may use AI-assisted evaluation tools, with human decision-making retained.

Hiring process

• Applications are reviewed through the hirify.global company website.
• Selected stages may use AI-powered tools for candidate matching and initial screening; candidates may request an alternative process.