InfoSec Compliance Lead: ISO/SOC/CMMC, FedRAMP & AI

Synack; San Mateo (CA); On-site; USD 150,000 - 180,000; Full time

Job summary

Synack is seeking an Information Security Compliance Manager to drive automated security compliance across its PTaaS platform. You will work with Product, Engineering, and Operations to implement security controls, automate SSPs and POAMs, and lead AI adoption within security operations.

This role requires US citizenship due to government contract requirements and offers a pathway to impact a security-first platform.

Qualifications

• 8+ years IT Security Strategy, Risk Management, IT Audit and Compliance with a Cloud Service Provider.
• Experience with Python, Terraform, and CI/CD pipelines, plus comfort integrating tools with AI.
• Experience with Enterprise Governance, Risk Management, and Compliance (GRC) tools.
• Experience with event monitoring and alerting tools such as Datadog, Stackdriver, and Azure Sentinel.
• Experience with SOAR or auto-remediation platforms and detection engineering / SIEM query languages.
• Experience with Cloud Native Application Protection Platforms (CNAPP).
• Experience with leveraging security tools within the Software Development Lifecycle (SDLC).
• Familiarity with secrets management and workload identity (non-human).
• Working knowledge of security regulations, standards, and frameworks, including ISO27000, ISO42001, OWASP, SOC2, GDPR, CMMC, FedRAMP, and NIST.
• Excellent written and verbal communication skills with the ability to accurately communicate security and risk-related information to technical and non-technical audiences.

Responsibilities

• Automate generation of System Security Plans (SSP) and related artifacts.
• Develop and maintain automated Plans of Action and Milestones (POAMs).
• Contribute to automation and AI adoption within security operations.
• Own inventory and risk assessments of AI/agentic systems, aligned to NIST AI RMF and ISO 42001.
• Build and maintain automated evidence collection and control-drift around security controls.
• Communicate security compliance issues to stakeholders and track remediation tasks.
• Codify security controls into IaC guardrails, CNAPP policies, and CI/CD checks.
• Collaborate with PMs and Engineers to ensure security policies are applied across Synack services.
• Coordinate with field teams for vendor security assessments and third-party risk assessments.

Skills

Python

Terraform

CI/CD

AI integration

GRC

Security monitoring

Communication

Tools

Datadog

Stackdriver

Azure Sentinel

SOAR

SIEM

Job description

Synack is seeking an Information Security Compliance Manager to drive automated security compliance across its PTaaS platform. You will work with Product, Engineering, and Operations to implement security controls, automate SSPs and POAMs, and lead AI adoption within security operations.

This role requires US citizenship due to government contract requirements and offers a pathway to impact a security-first platform.