Lead Product GRC Subject Matter Expert

📋 Description

• Own federal compliance content for FedRAMP, NIST, CMMC, DFARS, StateRAMP
• Translate regulatory controls into product capabilities and automated tests
• Collaborate with Engineering on detectors, mappings, and compliance logic
• Shape machine-readable compliance for OSCAL and continuous authorization
• Develop cross-framework mappings (NIST 800-53/171, CMMC, StateRAMP)
• Influence product, discovery, PRDs, and UX for controls and workflows

🎯 Requirements

• Federal GRC: 8–10+ years in GRC or information security, FedRAMP program work
• Deep federal knowledge: NIST 800-53/A/B, PPSM, STIGs, CIS benchmarks
• Builder mindset: capable of creating and operationalizing content
• OSCAl and FedRAMP 20x familiarity; machine-readable compliance
• Test-design expertise: clear pass/fail criteria and evidence criteria
• Product orientation: scalable capabilities and data-driven prioritization

🎁 Benefits

• Cash compensation: $230,000–$270,000 base + equity
• Medical, dental, vision; employee-only premiums covered
• 16 weeks paid parental leave
• Health and wellness stipend
• Remote workspace, internet, cellphone stipends
• Flexible PTO; 80 hours paid sick time