Head of Trust and Security

1 week, 4 days ago
Full-time
Executive
Cybersecurity
Filevine

Filevine

Filevine is a top legal tech company revolutionizing legal work with AI-powered case management software, empowering law firms to streamline operations and enhance client services.

Specialized Consumer Services
251-1K
Founded 2015
$226M raised

Description

  • Own Filevine’s FedRAMP 20x Moderate strategy, delivery plan, certification readiness, and ongoing compliance posture.
  • Lead the design and execution of FedRAMP evidence automation, continuous monitoring, and reporting for Marketplace certification and sustained authorization.
  • Serve as the single-threaded owner for FedRAMP engagements with 3PAOs, the FedRAMP PMO, agency stakeholders, and internal executive sponsors.
  • Set the roadmap and priorities for dedicated FedRAMP engineering resources and turn regulatory requirements into technical controls and sustainable processes.
  • Own POA&M governance, risk acceptance workflows, certification readiness reporting, and remediation planning across product and platform teams.
  • Own the operating model for security compliance and trust programs across FedRAMP, SOC 2, ISO, HIPAA, PCI-DSS, and customer security commitments.
  • Drive governance for vulnerability findings from scans, penetration tests, customer reviews, audits, and bug bounty programs, including remediation and escalation.
  • Maintain a single source of truth for security and compliance status, control gaps, remediation commitments, and customer-facing trust claims.
  • Own the operational privacy program in partnership with Legal, Security, Product, Marketing, and Engineering.
  • Translate security, compliance, FedRAMP, and privacy requirements into roadmaps, epics, milestones, and prioritized engineering work.
  • Drive alignment across Engineering, Product, Security, Legal, Compliance, Sales, Marketing, Customer Success, and executive leadership teams.
  • Lead change management efforts to embed security, privacy, compliance, and FedRAMP requirements into Filevine’s operating model and product culture.

Requirements

  • Bachelor’s degree or equivalent practical experience.
  • 10+ years of experience in security compliance, GRC, product/program leadership, privacy, trust, or related roles within SaaS, cloud, or high-trust technology environments.
  • Direct ownership of FedRAMP Moderate, FedRAMP High, FedRAMP 20x, or a comparable federal cloud authorization program.
  • Proven experience translating regulatory, security, and privacy requirements into technical implementation plans with engineering teams.
  • Experience leading complex, cross-functional initiatives with executive visibility, ambiguous requirements, and multi-quarter delivery timelines.
  • Experience partnering with security engineering, infrastructure, product, legal, audit, and customer-facing teams.
  • Deep knowledge of FedRAMP, NIST 800-53, FedRAMP 20x automation concepts, continuous monitoring, POA&M governance, 3PAO engagement, and federal cloud authorization workflows.
  • Strong working knowledge of security and compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, and customer security review processes.
  • Strong working knowledge of privacy operations, consent management, data governance, DSR workflows, subprocessors, DPAs, retention, and privacy-by-design practices.
  • Experience with FedRAMP 20x, evidence automation, GRC engineering, compliance-as-code, or continuous control monitoring (preferred).
  • Experience supporting federal, state, healthcare, insurance, legal, or other regulated enterprise customers (preferred).
  • Certifications such as CISSP, CISM, CISA, CRISC, PMP, or similar are a plus.

Benefits

  • Medical, dental, and vision insurance for full-time employees.
  • Competitive and fair pay.
  • Maternity and paternity leave for full-time employees.
  • Short-term and long-term disability coverage.
  • Opportunity to learn from a dedicated leadership team.
  • A dynamic, rapidly growing company focused on helping organizations thrive.
  • Top-of-the-line company swag.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Morning Executive Producer

TEGNA 5K-10K Media

KVUE-TV, TEGNA’s ABC affiliate in Austin, is seeking a Morning Executive Producer to lead the newsroom’s morning team and shape audience-focused local news coverage.

16 hours, 40 minutes ago

Production Director – Seasonal Content

Scopely 1K-5K Internet Software & Services

Scopely is hiring a Production Director – Seasonal Content to remotely lead the planning and execution of MONOPOLY GO!’s seasonal content portfolio across cross-functional game development teams.

16 hours, 40 minutes ago

Head of Production

Beast Industries is hiring a Head of Production to build and scale the operational organization behind a growing slate of original digital and live content.

16 hours, 55 minutes ago

Technical Delivery Manager (State & Local Government)

Appian 1K-5K Internet Software & Services

Appian is hiring a Technical Delivery Manager to lead customer technology engagements on the Appian platform and drive growth in strategic accounts for government and enterprise clients.

Agile CRM ERP
17 hours, 10 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers