About the company
Socure is the leading platform for digital identity verification and trust. Its predictive analytics platform applies artificial intelligence and machine learning techniques with trusted online/offline data intelligence from email, phone, address, IP, device, velocity, and the broader internet to verify identities in real time. The company has more than 1,400 customers across the financial services, government, gaming, healthcare, telecom, and e-commerce industries, including four of the top five banks, seven of the top 10 card issuers, three of the top MSBs, the top payroll provider, the top credit bureau, the top online gaming operator, the top Buy Now, Pay Later (BNPL) providers, and over 250 of the largest fintechs. Marquee customers include Chime, SoFi, Varo, Public, Stash, and DraftKings. Socure customers have become investors in the company including Citi Ventures, Wells Fargo Strategic Capital, Capital One Ventures, MVB Bank, Voyager, and Synchrony. Additional investors include Accel, T. Rowe Price, Bain Capital Ventures, Tiger Global, Commerce Ventures, Scale Venture Partners, Sorenson, Flint Capital, Two Sigma Ventures, and others.
Job Summary
What you'll do
📍Compliance & Certification Management 📍Day-to-day coordination and execution of external Third Party Assessment Organization (3PAO) assessments and responding to auditor requests for evidence and documentation. 📍Maintain and update FedRAMP and GovRAMP controls and documentation in alignment with organizational and regulatory requirements, including controls aligned with NIST SP 800-53 rev 5 and other related frameworks. 📍Prepare certification and authorization packages and maintain related documentation such as the System Security Plan (SSP) and associated appendices. 📍Continuous Monitoring & Vulnerability Management 📍Lead the day-to-day FedRAMP continuous monitoring process including vulnerability management lifecycle, from identification through remediation and verification, coordinating with Security, Engineering, and DevOps teams to address issues identified with tools such as Wiz, Burp Suite, AWS native services, and other platforms and resolve issues within FedRAMP and GovRAMP timelines. 📍Coordinate recurring continuous monitoring compliance activities such as access reviews, incident response exercises, and contingency plan testing.
What you'll bring
📍5+ years of cybersecurity or identity management experience, including 1+ year in the public sector. 📍Direct experience with FedRAMP, GovRAMP, and NIST frameworks (800-53, 800-63, 800-171). 📍Proven ability to manage continuous monitoring, vulnerability remediation, and compliance reporting. 📍Experience using AI tools (e.g., ChatGPT, Glean, Gemini) and machine-readable formats (e.g., OSCAL) to automate and streamline compliance processes. 📍Strong communication, organization, and collaboration skills with the ability to manage multiple priorities. 📍Ability to adapt to changing requirements 📍Must be a U.S. Person (U.S. Citizens or U.S. Permanent Residents) residing in the United States and be able to obtain a U.S. OPM NACI clearance.
If this role isn’t the perfect fit, there are plenty of exciting opportunities in blockchain technology, cryptocurrency startups, and remote crypto jobs to explore. Check them on our Jobs Board.
