Principal, Public Sector SecOps & GRC (Cybersecurity)

TL;DR

Principal, Public Sector SecOps & GRC (Cybersecurity): Leading security and compliance for public sector engagements with an accent on FedRAMP High, NIST 800-53, and continuous authorization. Focus on bridging SecOps and GRC to ensure comprehensive defense and secure delivery of cloud services to government agencies.

Location: Fully remote within the U.S. (Must be U.S. Citizen or Green Card holder residing in the U.S. for a minimum of 3 consecutive years)

Salary: $160,000 - $170,000 USD annually

Company

hirify.global Cloud Solutions is a leading digital cloud fax and interoperability solutions organization focusing on connecting healthcare providers and technology innovators.

What you will do

• Lead the design and management of a unified GRC program including FedRAMP High, GovRAMP, CMMC, and StateRAMP frameworks.
• Oversee threat hunting, vulnerability remediation, and submit Monthly Continuous Monitoring reports.
• Coordinate Annual 3PAO Security Assessments, penetration testing, and red team exercises.
• Serve as System Steward for the VA-F package in eMASS and manage RMF activities.
• Manage third-party MSSPs and provide security guidance to IT and engineering teams.
• Oversee incident response testing, training, and access trust governance.

Requirements

• Bachelor's degree in Computer Science, IT, or Cybersecurity.
• Active CISSP and PMP certifications required.
• Must undergo and pass a Public Trust Background Investigation.
• 8+ years in security GRC, with 5+ years specifically supporting FedRAMP High or NIST 800-53.
• 5+ years experience as an ISSM or ISSO for federal government high-impact systems.
• Proficiency with AWS GovCloud, AWS CLI, and GRC platforms like RSA Archer or ServiceNow.

Culture & Benefits

• Remote-first work environment with a focus on diversity and inclusion.
• Annual performance bonus and Employee Stock Purchase Plan (ESPP).
• Enhanced time off packages and comprehensive benefits.
• Opportunity to work on critical healthcare interoperability challenges.