GRC & FedRAMP Lead for Cloud Security

Socket.dev; San Francisco (CA); On-site; USD 165,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Disability insurance

401(k) retirement plan with company 匹配

Paid time off

Professional development support

Job summary

IREN seeks an experienced security leader to drive enterprise risk programs and FedRAMP authorization across its cloud platforms. You will shape governance aligned with regulatory needs and lead external assessments with 3PAOs and partners.

You will develop security policies matching ISO 27001, SOC 2, HITRUST and other frameworks, while guiding policy approvals and automation opportunities. Strong communications at all levels are essential.

Qualifications

• Bachelor’s (or Master’s) degree required in information security, risk, business or equivalent.
• 5–7 years of cybersecurity, IT program management, or related field experience.
• Proven track record leading at least one FedRAMP authorization.
• Deep knowledge of FedRAMP, NIST 800-53 controls, and supporting documentation.
• Audit/assessment experience using risk-based frameworks.
• Familiarity with cloud security architecture and related frameworks (SOC 2, ISO 27001, HITRUST).
• Strong communication and relationship-building across technical and executive levels.

Responsibilities

• Lead enterprise-wide risk assessment programs, identify strategic risks, mitigate and monitor residual risk.
• Develop and maintain governance frameworks aligning business objectives with regulatory requirements and security best practices.
• Execute the FedRAMP authorization program from strategy through implementation.
• Manage relationships with 3PAOs, consultants, and external partners to facilitate assessments and progress.
• Lead preparation and submission of all FedRAMP deliverables (SSP, policies, procedures, security documents).
• Develop security and privacy policies and control frameworks aligned with ISO 27001, SOC 2, HITRUST, FedRAMP and other regulations.
• Support policy approvals, exception handling, and attestation processes while seeking automation opportunities.
• Lead and execute enterprise risk assessments including vendor/process reviews.
• Support Third-Party Risk Management activities including vendor assessments and remediation tracking.
• Lead readiness and response for ISO 27001, HITRUST, FedRAMP audits and certifications.

Skills

FedRAMP knowledge

NIST 800-53 controls

Cloud security architecture

Governance and risk management

Auditing and assessment

Strong communication skills

Regulatory compliance awareness

Education

Bachelor’s or Master’s degree in Information Security, Risk, Business or equivalent

Job description

IREN seeks an experienced security leader to drive enterprise risk programs and FedRAMP authorization across its cloud platforms. You will shape governance aligned with regulatory needs and lead external assessments with 3PAOs and partners.

You will develop security policies matching ISO 27001, SOC 2, HITRUST and other frameworks, while guiding policy approvals and automation opportunities. Strong communications at all levels are essential.