Compliance Lead (FedRAMP/CMMC)

Location: Must be based in or able to work from New York, NY or Washington, D.C. (Hybrid)

Compensation: $95 – $140 per hour

Company

hirify.global is an AI-native software company building the modern infrastructure for American public services, backed by top-tier investors like a16z and NEA.

What you will do

• Own the operations side of FedRAMP certification, including control implementation, POA&M currency, and continuous monitoring.
• Run NIST 800-171 self-assessments and maintain the corporate CUI system security plan.
• Develop and maintain an obligation register covering all federal contractual and regulatory requirements (FAR/DFARS).
• Manage evidence flow to independent assessors and 3PAOs.
• Compute and maintain SPRS scores and handle federal portal submissions (PIEE/SPRS).
• Build and maintain core compliance plans including incident response, configuration management, and supply chain risk management.

Requirements

• Must be a US person eligible for a Tier 3 background investigation.
• Deep, current experience with FedRAMP (specifically 20x pathway) and NIST 800-53 Rev 5.
• Proven ability to compute SPRS scores and explain the mechanics of the 110-control basis.
• Hands-on experience with NIST 800-171 self-assessments and RMF packages.
• Direct experience submitting in federal portals like SPRS and PIEE.
• Ability to read and interpret FAR and DFARS flowdowns for contract compliance.

Nice to have

• Direct ownership of a FedRAMP authorization through to completion.
• Experience writing OSCAL by hand.
• Military background in security or intelligence.
• CMMC CCP or RP certification.

Culture & Benefits

• 100% coverage for medical, dental, and vision for employees and dependents.
• Unlimited PTO with a two-week minimum and company-wide winter break.
• 401(k) with 2% company match.
• Stipends for home office, professional development, recreation, and pet care.
• Fully covered gym membership.