Apply on Employer Site

Piedmont Global · 1 month ago

Head of Security and Compliance

United States

Full-time

Remote

Lead/Staff, Director/Executive

5+ years exp

Piedmont Global is a Strategic Globalization Organization (SGO) that helps clients scale with speed and navigate complexity. They are looking for a hands-on leader to manage their security and compliance function, focusing on modernizing their security posture and maintaining governance frameworks.

Information Technology & Services

Growth Opportunities

Responsibilities

Serve as the primary administrator for Vanta. You will manage continuous compliance monitoring daily, triage failing tests, automate evidence collection, and ensure our security posture remains audit-ready year-round

Own the relationships with third-party security vendors. You will hold vendors accountable to SLAs, ensure they deliver high-quality work, and conduct security reviews for new software procurement

Serve as the primary point of contact for audits. Maintain our ISO 27001 certification and lead the hands-on implementation for future compliance initiatives such as SOC 2 Type II and HITRUST

Partner directly with Software Engineering and DevOps to configure cloud security controls in AWS, review Infrastructure as Code, and integrate security tools into the SDLC

Manage day-to-day security operations, including vulnerability management, incident response, and access control reviews

Act as a subject matter expert internal business units, helping them understand and navigate security requirements in government and healthcare contracts

Partner closely with the IT Support team to design and validate secure configuration standards for laptops and mobile devices

Qualification

ISO 27001 certificationCompliance automationCloud security controlsVanta managementVendor managementIncident responseVulnerability managementAccess control reviewsIdentity managementHealthcare complianceGovernment compliance

Required

5+ years of experience in Information Security, GRC, or Security Engineering

Hands-on experience managing compliance automation platforms like Vanta is highly preferred

Proven experience helping an organization achieve or maintain frameworks like ISO 27001 or SOC 2

Strong technical background with exposure to cloud native environments, identity management, and modern SaaS platforms

Experience managing external vendors or contractors and holding parties accountable for deliverables and quality

You understand that security exists to support the business, not slow it down. You are pragmatic and skilled at right-sizing controls that support business needs while maintaining compliance

Preferred

Exposure to Government (FedRAMP, CMMC) or Healthcare (HIPAA) compliance environments

You've worked at software companies where security was mission critical. You know what it looks like when security is a core part of the product offering

Benefits

Health

Dental

401k

Vision

Pet Insurance

PTO

Paid Holidays

Flexible work schedule

Company

Piedmont Global

Your partner in Strategic Globalization. We equip organizations with the people, capabilities, and strategies to lead—globally, fluently, confidently.

Founded in 2013

Arlington, Virginia, US

201-500 employees