Senior Infrastructure & Compliance Program Leader

CYFR Technology; United States; Remote; USD 140,000 - 180,000; Full time

Job summary

CYFR Technology is seeking a Technical Program Manager for Infrastructure & Compliance to drive multi-team initiatives with minimal process overhead. You’ll own the infrastructure roadmap, lead SOC 2 and ISO 27001 audit cycles, and maintain a live program dashboard in Azure DevOps.

You will run effective meetings, manage dependencies and risks, and coordinate with engineering, IT, and security to remove blockers across time zones in a remote, async-first environment.

Qualifications

• 5+ years of technical program management experience in enterprise infrastructure environments.
• Background in systems administration or infrastructure engineering with AD forests, SQL Server AGs, VLANs.
• Experience managing SOC 2, ISO 27001, PCI DSS or similar compliance programs.

Responsibilities

• Manage timelines, dependencies, and risk registers for infrastructure and compliance programs across teams.
• Run meetings: weekly program syncs, quarterly planning, architecture review boards, incident postmortems.
• Own SOC 2 and ISO 27001 audit cycles: evidence collection, control owner, auditor liaison, remediation tracking.
• Maintain the program dashboard in Azure DevOps — epics, features, delivery plans, velocity tracking.
• Identify bottlenecks and know when to escalate or clear the path to keep projects on track.

Skills

Technical Program Management

Infrastructure

Audit management

Azure DevOps

Jira

Stakeholder communication

Risk management

Tools

Azure DevOps

Jira

Job description

CYFR Technology is seeking a Technical Program Manager for Infrastructure & Compliance to drive multi-team initiatives with minimal process overhead. You’ll own the infrastructure roadmap, lead SOC 2 and ISO 27001 audit cycles, and maintain a live program dashboard in Azure DevOps.

You will run effective meetings, manage dependencies and risks, and coordinate with engineering, IT, and security to remove blockers across time zones in a remote, async-first environment.