paycor
Head of Security & Compliance
Finch Computing
Remote, USA
Full-time
Senior · 7+ years experience
Remote
Discovered 1 weeks ago
Microsoft 365CI/CDAWSFedRAMPGovRAMPCMMC
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
Microsoft 365CI/CDAWS
Key Skills for This Role
Microsoft 365CI/CDAWSFedRAMPGovRAMPCMMC
Full Job Posting
- Sustain CMMC Level 2 and maintain accurate SSP, POA&M, and SPRS documentation.
- Administer Microsoft 365, Entra ID, Purview, Defender, Exchange Online, SharePoint, and Teams security controls.
- Govern source-code access, branch protection, secrets, CI/CD pipelines, build integrity, and software supply-chain evidence.
- Define and maintain CUI, personnel-access, and segregated-development boundaries.
- Build and operate security awareness, insider-threat, and incident-response programs.
- Own customer security assessments and DFARS 252.204-7012 obligations.
- Establish a practical AI governance and assurance program.
- Assess AWS security controls and evidence without serving as the AWS operator.
- Help shape future FedRAMP or GovRAMP authorization efforts as customer demand develops.
- Brief executives, the board, customers, and external assessors.
- 7+ years in federal or defense-industrial security, compliance, governance, or ISSM-type roles.
- Direct experience implementing and sustaining NIST SP 800-171, CMMC, an ATO, FedRAMP continuous monitoring, or a comparable authorization.
- Hands-on authorship and maintenance of SSPs, POA&Ms, and audit evidence.
- Working knowledge of DFARS, CUI handling, and DoD incident-reporting requirements.
- Production administration experience with Microsoft 365 and Entra ID.
- Experience applying security controls to source control, CI/CD pipelines, secrets, and software-development environments.
- Ability to evaluate technical cloud controls and determine whether the documented posture matches reality.
- Strong executive communication and defensible technical writing skills.
- Experience with FedRAMP or GovRAMP, export controls, insider-threat programs, AI governance, AWS, research security, GCC High, or relevant certifications is preferred.
- This role is ideal for someone who wants direct ownership of a growing security and compliance program and is comfortable moving between tenant administration, audit evidence, engineering governance, customer conversations, and executive briefings.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Finch Computing
Senior AI/ML Engineering Architect — TS/SCI w/ Polygraph (Hybrid)
Herndon, USA
SeniorFull-time
Discovered YesterdayView →
Senior AI/ML Engineering Architect — TS/SCI w/ Polygraph (Hybrid)
Herndon, USA
Discovered YesterdayFull-time
Senior AI/ML Engineering Architect (Open to Remote)
, USA
Discovered YesterdayFull-time
AI/ML Engineer
McLean, USA
Discovered 1 weeks agoFull-time
Full Stack Developer TS/SCI with Polygraph
McLean, USA
Discovered 1 weeks agoFull-time
Proposal Coordinator
, USA
Discovered 1 weeks agoFull-time
Proposal Manager
, USA
Discovered 1 weeks agoFull-time
GSA Schedule Contracts Manager
, USA
Discovered 1 weeks agoFull-time
Web Developer
, USA
Discovered 1 weeks agoFull-time