Governance, Risk, and Compliance Expert, GTM - V4G (Cybersecurity)

Location: Remote U.S.; candidates must be based in Pacific, Mountain, or Central time zones. Travel roughly twice per quarter for customer onsites, POC workshops, team offsites, and other events.

Salary: $171K–$201K base pay, plus equity and benefits.

Company

hirify.global provides a Trust Management Platform that helps businesses continuously monitor, improve, and prove security and compliance.

What you will do

• Advise prospects and customers on FedRAMP, GovRAMP, TX-RAMP, NIST 800-53, CMMC 2.0, NIST 800-171, scoping, policies, controls, and security best practices.
• Partner with Sales, Account Management, Solutions Engineering, and GTM Enablement teams on public-sector GRC discussions, customer workflows, and internal training.
• Represent hirify.global’s Trust Management Platform and V4G features in customer conversations, executive engagements, webinars, panels, conferences, and partner events.
• Answer stakeholder questions on GRC foundations and scaling, framework requirements, third-party risk, IT, security, privacy, enterprise risk, and AI governance.
• Create public-sector GRC marketing and education content and identify customer requirements that can improve hirify.global’s security, privacy, and AI governance features.

Requirements

• 5+ years of US government compliance experience, including direct experience taking an organization to FedRAMP Ready or Authorized, assessing as a 3PAO, or both.
• Working knowledge of FedRAMP across all impact levels and its active modernization, CMMC 2.0, NIST 800-53, NIST 800-171, and StateRAMP/state-program dynamics.
• Foundational knowledge of ISO 27001 and SOC 2.
• SSP and POA&M authorship-level familiarity and ConMon operations.
• Familiarity with cloud infrastructure, version control systems, risk management, vulnerability management, and related security processes.
• Experience with third-party/vendor risk management, including due diligence, risk scoring, risk assessments, and ongoing monitoring.
• Background in IT, security, and/or enterprise risk management workflows, including risk scoring, likelihood/impact analysis, and treatment planning.
• Excellent communication and facilitation skills, including delivering high-impact learning experiences and building credibility with senior sellers.
• Strong written and verbal communication skills with C-level contacts, security and privacy leaders, legal teams, partners, and industry audiences.
• Comfort using AI responsibly to improve the efficiency and impact of GRC work.

Nice to have

• Enterprise sales process literacy, such as MEDDPICC.
• Customer Trust or Sales Engineering experience.
• Certifications such as CISA, CISSP, RP, CCA, or CCP and/or formal education.

Culture & Benefits

• Remote work with workspace, internet, and cellphone stipends.
• Medical, dental, and vision coverage, with employee-only premiums covered for most medical plans.
• 16 weeks of paid parental leave, family planning benefits, health and wellness stipend, and commuter benefits for SF and NYC office reporters.
• Matching 401(k) contribution with immediate vesting, flexible PTO, 80 hours of sick time, and 11 company-paid holidays.
• Virtual team-building activities, lunch and learns, and company-wide events.