Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
$175к-200к/год
$150к$170кмедиана$210к
По похожим ролям (49) ~ $170к/год
На СНГ рынке: $6.7к/мес ($3.6к - $12к)
62
Средняя вакансия
развернуть
Обязанности в комплаенсе описаны понятно, но в тексте есть посторонний фрагмент про Customer Support Engineer, поэтому описание выглядит менее надежным и детали роли стоит перепроверить.
Чужой фрагмент
Понятные задачи
Продуктовая среда
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Compliance Program Manager (FedRAMP): Overseeing FedRAMP readiness and authorization while managing SOC 1, SOC 2, and PCI DSS compliance programs with an accent on audit coordination, risk assessment, and control implementation. Focus on driving ATO processes, evaluating security and privacy gaps, and coordinating remediation across technical, legal, and people teams.
Location: Remote - US
Base salary range: $175,000–$200,000 USD annually, plus variable compensation where appropriate, benefits, and equity.
Company
hirify.global provides managed Postgres and Vitess/MySQL database platforms for businesses handling data and workloads at scale.
What you will do
Oversee hirify.global’s FedRAMP readiness and authorization-to-operate process from start to finish.
Serve as the primary compliance contact for SOC 1, SOC 2, PCI DSS, and FedRAMP audits and assessments.
Prepare audit plans, review documentation and evidence, evaluate procedures, and support external walkthroughs.
Establish, track, and report compliance-program KPIs and maturity metrics.
Collaborate with IT, Engineering, Legal, and People teams on privacy, data protection, and compliance requirements.
Assess security and compliance risks, identify gaps, and propose and implement remediation controls using industry standards and best practices.
Requirements
5+ years of experience contributing to or managing audits for a technology-sector company, including demonstrable FedRAMP subject-matter expertise.
Experience with SOC 2 and the PCI Data Security Standard as a contributor or control owner.
Excellent interpersonal, verbal, and written communication skills, including the ability to explain compliance and privacy concepts to technical and non-technical stakeholders.
Experience working in a remote-first organization, often asynchronously across multiple teams and time zones.
Experience working with external auditors, outside consultants, and legal affairs.
Experience contributing to or managing company-wide risk assessments.
Experience and knowledge of cloud service providers, including AWS, Azure, and GCP, and how to interact with them.
Strong organization and comfort operating in ambiguous or changing situations and across departments without organizational silos.
Nice to have
Experience with databases, developer tools, infrastructure, or other technical products.
CISSP preferred; CISA or CISM also relevant.
Working knowledge of SQL, preferably with MySQL and/or PostgreSQL.
Culture & Benefits
Remote-first work environment supporting collaboration across locations and time zones.
Small teams and a focus on high-impact security and compliance programs that support customer trust and revenue.
Benefits and equity are included in total compensation, with variable compensation where appropriate.
Inclusive workplace with accommodation available during the interview process.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →