Security GRC Lead

Salesforce

GRC Lead managing FedRAMP compliance and security frameworks for public sector clients. Collaborating with engineering and legal teams to ensure cloud product compliance and regulatory standards.

Posted 7/13/2026full-timeHerndon • District of Columbia, Virginia • 🇺🇸 United StatesSenior💰 $148,500 - $223,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in managing FedRAMP authorization programs, including compliance with regulatory standards and collaboration with cross-functional teams. Possesses strong knowledge of cloud environments and corporate security management frameworks to effectively drive continuous monitoring and audit processes.

Highest-signal resume keywords

FedRAMP Program ManagementCloud Compliance (AWS GovCloud, Azure Government, Google Cloud)Corporate Security ManagementGovernance Frameworks (SOC 2, ISO 27001, PCI DSS, HIPAA, CMMC)Clear Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

FedRAMP Authorization ManagementProgram ManagementProject ManagementContinuous MonitoringAudit Planning and Support

Soft Skills

CollaborationClear Communication

Industry Keywords

Third-Party Assessment Organization (3PAO)System Security Plan (SSP)Plan of Action and Milestones (POA&M)Software as a Service (SaaS)Infrastructure as a Service (IaaS)Platform as a Service (PaaS)

Tech Stack

Tools & technologies

AWSAzureCloud

About the role

Key responsibilities & impact

Own and manage FedRAMP and related authorization programs end to end, including relationships with our Third-Party Assessment Organization (3PAO), sponsoring agencies, and the FedRAMP Program Management Office (PMO), as well as maintenance of the System Security Plan (SSP) and Plan of Action and Milestones (POA&M).
Drive Continuous Monitoring efforts and lead annual external audits, including planning, scheduling, preliminary analysis, and providing audit training and support to cross-functional partners.
Collaborate with engineering, product, sales, and legal teams to safely onboard new cloud products into the compliance boundary, identify opportunities to reduce risk, and document and address findings in accordance with FedRAMP regulatory standards.
Provide subject-matter expertise on all public sector requirements to internal stakeholders and customers, and contribute to reporting and metrics that provide meaningful context for informed decision-making.

Requirements

What you’ll need

5+ years of FedRAMP industry experience, including program and project management at a software company.
Hands-on experience with government cloud environments such as AWS GovCloud, Azure Government, or Google Cloud (covering Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS) models).
Strong working knowledge of corporate security management, governance frameworks, and compliance standards including SOC 2, ISO 27001, PCI DSS, HIPAA, and CMMC.
Clear communication skills with the ability to work directly with engineering, product, DevSecOps, and executive stakeholders and translate compliance requirements into actionable guidance.

Benefits

Comp & perks

time off programs
medical
dental
vision
mental health support
paid parental leave
life and disability insurance
401(k)
employee stock purchasing program