Lead Product GRC Subject Matter Expert

📋 Description

• Build and own federal compliance frameworks — Lead the creation, enhancement, and lifecycle
• Interpret controls at the mechanics level — Work with 800-53A/B baselines; resolve parameters
• Author automated tests & continuous monitoring — Translate controls into automated tests and
• Lead V4G's machine-readable future — Shape OSCAL and FedRAMP 20x machine-readable content: SSPs
• Design crosswalks & mappings — Maintain mappings across 800-53, 800-171, CMMC, StateRAMP with
• Act as a product advisor across discovery & design — Collaborate on feature discovery, UI/UX

🎯 Requirements

• 8–10+ years in GRC/Information Security with hands-on federal compliance (FedRAMP programs, SSPs
• Fluency with NIST 800-53/FedRAMP relationships, 800-53A/B, organization-defined parameters, PPSM
• Experience with OSCAL or machine-readable compliance approaches; knowledge of federal authorization
• Ability to turn controls into test design with evidence criteria and coverage across components.
• Product mindset with data-driven prioritization; strong written/verbal communication; autonomous
• Nice-to-have: StateRAMP, CNSSI 1253/ICD 503, GovCloud/IL environments; prior GRC product/content

🎁 Benefits

• Industry-competitive salary and equity
• Comprehensive medical, dental, and vision coverage; employee premiums covered for most plans
• 16 weeks paid Parental Leave
• Health & wellness stipend
• Remote workspace, internet, and cellphone stipend
• Commuter benefits for SF/NYC office alignments