FedRAMP/GovRAMP Compliance Program Lead

Location: Boston, MA, United States

Base compensation: $201,000–$251,000 USD annually, plus a discretionary annual variable target incentive.

Company

hirify.global is a privately held data technology provider delivering platforms for healthcare, finance, manufacturing, and supply chain customers in more than 80 countries.

What you will do

• Lead the FedRAMP and GovRAMP authorization readiness program, including roadmaps, milestones, risk management, and executive reporting.
• Define and maintain authorization boundaries with Product, Engineering, Cloud Services, Security, Managed Services, Support, and Legal.
• Coordinate gap analyses, readiness assessments, remediation planning, and formal assessments with external advisors and 3PAOs.
• Develop and maintain SSPs, policies, procedures, control narratives, evidence repositories, POA&Ms, and continuous monitoring documentation.
• Translate FedRAMP, GovRAMP, and NIST 800-53 requirements into control ownership and repeatable operational processes.
• Align cloud architecture, change management, incident response, vulnerability management, access control, logging, and monitoring with compliance requirements.

Requirements

• 12+ years of experience leading or supporting FedRAMP, GovRAMP, StateRAMP, or comparable cloud compliance programs.
• Strong knowledge of NIST 800-53, cloud security frameworks, SaaS, and regulated cloud environments.
• Experience with authorization activities, audits, continuous monitoring, security assessments, and FedRAMP documentation.
• Experience driving cross-functional initiatives, managing risks, and delivering executive reporting.
• Ability to translate complex compliance requirements into operational guidance for technical and non-technical stakeholders.
• Strong written communication and documentation skills.

Nice to have

• FedRAMP Moderate/High, GovRAMP, or StateRAMP authorization experience.
• Experience working with 3PAOs, advisory firms, or government sponsors.
• Experience with AWS GovCloud, Kubernetes, infrastructure as code, vulnerability management, identity and access management, or security monitoring.
• Experience with GRC platforms, compliance automation, or continuous monitoring tools.
• Certifications such as CISSP, CISM, CISA, CRISC, CCSP, CCSK, PMP, or Security+.

Culture & Benefits

• Medical, vision, and dental insurance.
• Short-term and long-term disability and life insurance.
• 401(k) profit-sharing contribution.
• Paid time off, holidays, and parental leave.
• Tuition reimbursement and 24×7 customer and partner support environment.