FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in leading end-to-end audits and compliance programs, particularly within federal frameworks such as FedRAMP and DoD SRG. Proficient in cloud security principles, risk management, and translating complex regulatory requirements for diverse audiences.
Highest-signal resume keywords
GRC ManagementCloud Security PrinciplesNIST 800-53 ImplementationFederal Audit ManagementJira Proficiency
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Technical AuditsCompliance ProgramsControl MappingGap AnalysesRemediation OversightRisk ManagementCloud ConfigurationsSecurity DocumentationAudit EvidenceVulnerability Analysis
Soft Skills
Excellent Communication SkillsMentoring StakeholdersCross-Functional Collaboration
Tools & Technologies
JiraConfluenceExecutive Dashboards
Certifications & Qualifications
CISACRISCCISSPISO Lead Implementer
Industry Keywords
FedRAMPDoD SRGCJISUS Public SectorCompliance MaturityAuthorization to Operate (ATO)FIPS 140-2
Tech Stack
Tools & technologiesAWSAzureCloudCyber SecurityMongoDB
About the role
Key responsibilities & impact- Lead end-to-end external audits and certifications, including scoping, audit plans, evidence, auditor engagement, findings, and final outcomes
- Own internal audit cadences and remediation tracking
- Establish accountability for findings, milestones, dependencies, and resolution timelines
- Serve as a lead contact for auditors and enterprise customers during security reviews and audit deep-dives
- Map regulatory requirements to the central control framework and conduct gap analyses
- Assess compliance-program maturity and report risks, gaps, trends, and delivery status
- Author and review customer-facing security documentation and audit evidence
- Lead cross-functional workstreams advancing the ARC roadmap
- Build and maintain executive and operational dashboards and Jira workflows
- Mentor stakeholders and partner teams on compliance practices
- Lead federal assessments with 3PAOs, agency sponsors, and the FedRAMP PMO
- Manage the federal continuous monitoring program, including vulnerability analysis and POA&M maintenance
- Lead annual technical reviews and updates of FedRAMP artifacts, including SSP, ISCP, and IRP
- Advise Engineering and Operations on cloud configurations meeting FIPS 140-2, boundary protection, access control, and DoD IL5+ mandates
- Represent MongoDB in technical reviews with 3PAOs and federal agencies
- Translate regulatory requirements and technical controls for technical and non-technical audiences
Requirements
What you’ll need- US Citizenship required
- Bachelor’s degree in a technical field such as Information Systems, Computer Science, or Cybersecurity, or equivalent practical experience
- 7+ years of experience in GRC, Information Security, or IT Audit, preferably in a SaaS or cloud environment, with a heavy focus on US Public Sector frameworks (FedRAMP, DoD SRG, CJIS)
- Demonstrated experience leading technical audits or compliance programs
- Strong understanding of cloud security principles and risk management across AWS, Google Cloud, or Azure
- Deep understanding of NIST 800-53 and NIST 800-171 controls and implementation within cloud architectures
- Proven experience managing federal audits from kickoff through issuance of an Authorization to Operate (ATO)
- Ability to explain complex security configurations to government auditors and internal technical teams
- Advanced proficiency in Jira and Confluence
- Practical experience with control mapping, gap analyses, remediation oversight, and program or control-maturity assessments
- Advanced proficiency with Jira or similar tools for audit findings, control data, and remediation workflows
- Excellent written and verbal communication skills
- Certifications such as CISA, CRISC, CISSP, or ISO Lead Implementer are preferred
Benefits
Comp & perks- Equity
- Employee stock purchase program
- Flexible paid time off
- 20 weeks fully-paid gender-neutral parental leave
- Fertility and adoption assistance
- 401(k) plan
- Mental health counseling
- Transgender-inclusive health insurance coverage
- Health benefits offerings
- Employee affinity groups
- Supportive and enriching culture
- Necessary disability accommodations during the application and interview process
