Security and Compliance Lead

Job Summary:

The Security and Compliance Lead is responsible for overseeing security governance, compliance management, and risk mitigation activities across the IT environment. The role ensures adherence to FedRAMP-related requirements, protection of Federal Tax Information (FTI), vulnerability management processes, and compliance with frameworks such as SOC 2 and ISO standards. The individual works closely with technical, operational, audit, and business teams to maintain a strong security posture, support regulatory requirements, and drive continuous compliance improvements.

Key Responsibilities:

• Lead the organization's security and compliance programs to ensure adherence to regulatory, contractual, and organizational requirements.
• Manage compliance activities related to FedRAMP controls and security requirements.
• Ensure proper handling, protection, and monitoring of Federal Tax Information (FTI) in accordance with applicable regulations and policies.
• Develop, maintain, and monitor security policies, standards, procedures, and compliance controls.
• Oversee vulnerability management processes, including vulnerability assessments, remediation tracking, reporting, and risk mitigation.
• Coordinate periodic security reviews, risk assessments, and compliance evaluations.
• Support SOC 2, ISO 27001, and other compliance audits by collecting, validating, and maintaining required evidence and documentation.
• Track and manage audit findings, compliance gaps, corrective actions, and remediation plans.
• Collaborate with infrastructure, application, security, and operations teams to implement and maintain security controls.
• Monitor regulatory changes and assess their impact on security and compliance obligations.
• Prepare compliance reports, risk dashboards, and executive updates for management and stakeholders.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.
• 7+ years of experience in Information Security, Risk Management, Compliance, Audit, or Governance roles.
• Strong knowledge of FedRAMP security requirements and regulatory compliance frameworks.
• Experience handling and protecting Federal Tax Information (FTI) and supporting regulated environments.
• Hands-on experience managing vulnerability assessment, remediation, and risk management programs.
• Experience supporting SOC 2, ISO 27001, and similar regulatory or security compliance audits.
• Knowledge of security governance, risk management, security controls, and compliance monitoring.
• Familiarity with security tools, vulnerability management platforms, and audit management processes.
• Strong analytical, problem-solving, and risk assessment skills.
• Excellent communication, documentation, and stakeholder management abilities.
• Experience working with auditors, regulators, customers, and cross-functional technology teams.