USAManager, Information Security
1 мес. назад
USAMiddleRemote
security strategycompliancecloud infrastructurefedrampdod-ilstaterampcjis
Own the information security strategy for regulated cloud offerings and certifications to support highly restricted environments.
Обязанности
- Define and execute the multi-year roadmap for achieving for Government certifications (FEDRAMP, DOD-IL, StateRAMP, CJIS, etc)
- Partner closely with Security, Engineering, Compliance, Legal, GTM and Operations teams to ensure Cloud meets the requirements of frameworks including SOC 2, ISO 27001/27701, HIPAA, PCI DSS, and government-specific standards (FIPS, Common Criteria / Protection Profile, NIST SP800-171, CMMC, Sec 508/VPAT, DISA STIG).
- Translate complex regulatory and security requirements into scalable product capabilities across identity and access management (IAM), encryption, key management, audit logging, access controls, and operational security.
- Drive product requirements for FIPS-compliant cryptographic modules and government-specific deployment and licensing models.
- Establish long-term strategy for enterprise security capabilities that support regulated industries worldwide.
- Own the product strategy and roadmap for sovereign cloud offerings, including the European Sovereign Cloud (ESC), Kingdom of Saudi Arabia (KSA), and future sovereign cloud regions.
- Own and deliver long-term Five-Eyes Sovereign Cloud Deployments
- Define product capabilities that address data residency, personnel access controls, customer-managed encryption, and operational sovereignty requirements.
- Work with cloud providers and strategic partners to enable deployments in restricted and regulated environments, including offerings such as Assured Workloads and sovereign cloud frameworks.
- Partner with legal, compliance, and regional stakeholders to navigate evolving global regulations and regional market requirements.
Требования
- 8+ years of product management experience, including significant experience building cloud infrastructure, platform, security, or enterprise SaaS products.
- Deep understanding of FedRAMP certification requirements and the challenges of operating compliant multi-tenant cloud services.
- Strong technical understanding of modern cloud architectures across AWS, Azure, and GCP.
- Experience with security domains including IAM, network isolation, private connectivity, encryption, key management systems (KMS/BYOK), audit logging, and access controls.
- Familiarity with global data residency and sovereignty requirements, including GDPR and emerging regional regulatory frameworks.
- Demonstrated success leading complex cross-functional initiatives involving engineering, security, compliance, legal, and GTM teams.
- Strong written and verbal communication skills, with the ability to influence both technical and executive audiences.
Будет плюсом
- Experience with US Government Security and Risk Frameworks (FEDRAMP, DOD IL, RMF, etc) .
- Experience with sovereign clouds, government cloud regions, and regulated industry offerings.
- Background in databases, data platforms, analytics, or infrastructure software.
- Experience commercializing open-source technologies for enterprise and government customers.
- Familiarity with FIPS 140-2/140-3 validation requirements and government procurement processes.
- Experience working directly with federal, defense, intelligence, or public-sector customers.
- Existing security clearance or ability to obtain one.
Условия
- For roles based in the United States , t he typical starting salary range for this position is listed above. In certain locations, such as the San Francisco Bay Area and the New York City Metro Area, a premium market range may apply, as listed.
- These salary ranges reflect what we reasonably and in good faith believe to be the minimum and maximum pay for this role at the time of posting. The actual compensation may be higher or lower than the amounts listed, and the ranges may be subject to future adjustments.
- An individual’s placement within the range will depend on various factors, including (but not limited to) education, qualifications, certifications, experience, skills, location, performance, and the needs of the business or organization.
- If you have any questions or comments about compensation as a candidate, please get in touch with us at paytransparency@.com .
- Flexible work environment - is a globally distributed company and remote-friendly. We currently operate in over 20 countries.
- Healthcare - Employer contributions towards your healthcare.
- Equity in the company - Every new team member who joins our company receives stock options.
- Time off - Flexible time off in the US, generous entitlement in other countries.
- A $500 Home office setup if you’re a remote employee.
- Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.
Другое
- Recognized on the 2025 Forbes Cloud 100 list, is one of the most innovative and fast-growing private cloud companies. With more than 3,000 customers and ARR that has grown over 250 percent year over year, leads the market in real-time analytics, data warehousing, observability, and AI workloads.
- The company’s sustained, accelerating momentum was recently validated by a $400M Series D financing round. Over the past three months, customers including Capital One, Lovable, Decagon, Polymarket, and Airwallex have adopted the platform or expanded existing deployments. These customers join an established base of AI innovators and global brands such as Meta, Cursor, Sony, and Tesla.
- We’re on a mission to transform how companies use data. Come be a part of our journey!
- This role sits at the intersection of product management, security engineering, compliance, legal, and cloud infrastructure. You will own the information security strategy for regulated cloud offerings, certifications, sovereign cloud deployments, and specialized regional offerings that enable customers to operate in highly restricted environments.
- As part of a rapidly scaling start up, you will be instrumental in shaping our culture.
- Are you interested in finding out more about our culture? Learn more about our values here . Check out our blog posts or follow us on LinkedIn to find out more about what’s happening at .
- provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
- Please see here for our Privacy Statement.