Filevine · 2 weeks ago
Head of Trust and Security
United States
Full-time
Remote
Director/Executive
10+ years expFilevine is a Legal AI company delivering Legal Operating Intelligence for the future of legal work. The Head of Trust and Security is a senior leadership role responsible for overseeing Filevine's security, compliance, privacy, and government authorization initiatives, particularly focusing on FedRAMP compliance and broader trust programs.
Artificial Intelligence (AI)Big DataLegalEnterprise SoftwareSaaSSoftwareData ManagementLegal TechProject Management
Responsibilities
Own Filevine’s FedRAMP 20x Moderate strategy, delivery plan, certification readiness, and ongoing compliance posture
Lead the design and execution of FedRAMP evidence automation, continuous monitoring, and reporting required for Marketplace certification and sustained authorization
Serve as the single-threaded owner for FedRAMP engagements with 3PAOs, the FedRAMP PMO, agency stakeholders, and internal executive sponsors
Set the roadmap and priorities for dedicated FedRAMP engineering resources, ensuring regulatory requirements become shipped technical controls, automated evidence, and operationally sustainable processes
Own POA&M governance, risk acceptance workflows, certification readiness reporting, and remediation planning across product and platform teams
Ensure FedRAMP implementations are pragmatic, risk-based, technically grounded, and appropriately scoped for Filevine’s architecture, maturity, and business priorities
Provide clear, consistent executive reporting on progress, risk, tradeoffs, dependencies, resourcing needs, and certification readiness
Own the operating model for Filevine’s security compliance and trust programs across FedRAMP, SOC 2, ISO, HIPAA, PCI-DSS, customer security commitments, and related frameworks
Partner with the CISO, Security Engineering, Product, and Infrastructure leaders to convert compliance obligations and security findings into prioritized engineering work
Drive governance for vulnerability findings from scanning tools, penetration tests, customer reviews, audits, and bug bounty programs, including risk adjustment, remediation ownership, escalation, and executive tradeoff decisions
Maintain a single source of truth for security/compliance status, control gaps, remediation commitments, and customer-facing trust claims
Ensure trust center materials, customer security responses, sales enablement messaging, and public compliance claims are accurate, current, and defensible
Own Filevine’s operational privacy program in partnership with Legal, Security, Product, Marketing, and Engineering
Oversee privacy tooling and workflows, including consent management, cookie compliance, data subject request operations, data mapping, subprocessors, retention, and privacy-by-design review processes
Translate privacy obligations and customer commitments into product, engineering, and operational requirements
Partner with Legal on DPAs, subprocessors, customer privacy commitments, and regulatory changes that affect Filevine products and data practices
Support AI and data governance efforts by ensuring privacy, security, and customer trust requirements are reflected in product and operational decisions
Translate security, compliance, FedRAMP, and privacy requirements into roadmaps, epics, milestones, and prioritized engineering work
Batch, sequence, and present initiatives through Agile ceremonies, planning forums for prioritization against company-wide initiatives
Define success metrics, delivery milestones, ownership models, and operating cadences across long-running, multi-quarter initiatives
Drive alignment between compliance goals, engineering capacity, product strategy, customer commitments, and business risk
Partner with engineering leaders to scope work deeply enough that teams understand the control objective, technical requirement, evidence expectation, and business priority
Drive alignment across Engineering, Product, Security, Legal, Compliance, Sales, Marketing, Customer Success, and executive leadership teams
Clearly communicate scope, sequencing, dependencies, risks, and tradeoffs across a large and evolving portfolio of work
Continuously rebalance priorities in response to customer demands, federal market requirements, audit findings, product strategy, and changing risk posture
Lead change management efforts to embed security, privacy, compliance, and FedRAMP requirements into Filevine’s operating model and product culture
Escalate effectively when tradeoffs require executive decision-making, budget, staffing, or scope changes
Qualification
Required
Bachelor's degree or equivalent practical experience
10+ years of experience in security compliance, GRC, product/program leadership, privacy, trust, or related roles within SaaS, cloud, or high-trust technology environments
Direct ownership of FedRAMP Moderate, FedRAMP High, FedRAMP 20x, or a comparable federal cloud authorization program
Proven experience translating regulatory, security, and privacy requirements into technical implementation plans with engineering teams
Experience leading complex, cross-functional initiatives with executive visibility, ambiguous requirements, and multi-quarter delivery timelines
Experience partnering with security engineering, infrastructure, product, legal, audit, and customer-facing teams
Deep knowledge of FedRAMP, NIST 800-53, FedRAMP 20x automation concepts, continuous monitoring, POA&M governance, 3PAO engagement, and federal cloud authorization workflows
Strong working knowledge of security and compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, and customer security review processes
Strong working knowledge of privacy operations, consent management, data governance, DSR workflows, subprocessors, DPAs, retention, and privacy-by-design practices
Ability to translate regulatory and security requirements into actionable, value-driven product and engineering work
Strong product and program management expertise, including roadmap development, prioritization, milestone definition, and executive reporting
Pragmatic, analytical approach to risk management and decision-making in fast-paced environments
Excellent stakeholder management, written communication, and executive presence
Comfort operating with dedicated engineering resources while remaining accountable for prioritization, clarity, outcomes, and risk-based tradeoffs
Preferred
Experience with FedRAMP 20x, evidence automation, GRC engineering, compliance-as-code, or continuous control monitoring
Experience supporting federal, state, healthcare, insurance, legal, or other regulated enterprise customers
Certifications such as CISSP, CISM, CISA, CRISC, PMP, or similar are a plus
Benefits
Medical, Dental, & Vision Insurance (for full-time employees)
Competitive & Fair Pay
Maternity & paternity leave (for full-time employees)
Short & long-term disability
Opportunity to learn from a dedicated leadership team
Top-of-the-line company swag
Company
Filevine
Filevine provides a legal operating platform integrating AI for case, document, and lead management.
501-1000 employees
Funding
Current Stage
Late StageTotal Funding
$650.02MKey Investors
Accel,Halo Experience Company,Insight PartnersInsight PartnersStepStone Group
2025-12-19Secondary Market· $1.9M
2025-09-23Series E· $260M
2024-06-01Series Unknown· $150M
Leadership Team
Nathan Morris
Co-Founder and Chief Culture Officer
Erik Bermudez
VP of Strategic Partnerships
Recent News
TechBuzz News
2026-07-30
2026-07-30
Company data provided by crunchbase