Senior Security Assurance Technical Program Manager (Remote)

Company Overview

ID.me simplifies how people securely prove and share their identity online. The company empowers people to control their data through a portable and trusted login, which means they don’t need to create a new password when visiting sites that have the ID.me button.

The COVID-19 pandemic accelerated digital migration for many critical services. Those services require a trusted identity to safeguard against fraud and help ensure people are who they claim to be. With ID.me, login and identity credentials move with people, which can reduce the time and frustration of having to verify at multiple sites and set up multiple passwords.

ID.me is a credential service provider compliant with federal standards for digital identity verification. 

In addition to helping people control their credentials and data, the company’s “No Identity Left Behind” initiative strives to expand access and inclusion for all people. The company offers multiple pathways to verification – online self-serve, live video chat agents, and in person. ID.me is passionate about building a robust identity network that does not compromise access for traditionally underserved groups.

Role Overview

ID.me is looking for a Senior Security Assurance Technical Program Manager to add to our growing security team to help build highly scalable, secure, and compliant products. The Senior Security Assurance TPM will have the opportunity to drive and develop mechanisms that demonstrate trust with users, customers, partners and regulators. The role will strive to raise the security bar across the organization affecting all control domains. This person will work closely with the Head of Security Assurance to verify controls are designed and operating effectively, manage a portfolio of compliance frameworks, and develop options for stakeholders to address control requirements. The Security Assurance TPM will perform the following additional responsibilities:

• Manage control conformance with rigorous attention to detail
• A single threaded owner of their work demonstrated by being self-motivated, results-oriented, forward thinking, and always looking for ways to improve.
• Maintain relationships with cross functional teams in a high collaborative environment
• Debate and advise like a scientist and with empathy.
• Rapidly understand unique business operations, processes, and functions 
• Develop control testing schedules and plans
• Balance multiple projects and/or tasks concurrently
• Build and maintain reporting capabilities for the range of work
• Apply information technology and audit concepts to the company’s mission
• Review and evaluate internal controls and supporting documentation
• Determine compliance with policies and selected laws/regulations
• Succinctly communicate findings to key stakeholders in writing and verbally
• Supervise and review work performed by control owners

Required Qualifications

• BA/BS/BBA degree from an accredited college/university with a major in information technology, accounting, or another relevant field of study, or equivalent experience
• 6+ years direct experience managing compliance programs including: audit readiness, program reporting, continuous monitoring, auditor education, and remediation management.
• Proficient project management skills which includes planning, work tracking, reporting, and data analysis 
• Proficient analytical skills to verify control design and identify minimum assurance evidence through interview and observation
• Experience working with NIST 800-53, FedRAMP, FISMA, ISO, and/or SOC control programs
• Experience with cloud service providers, SaaS product design, CI/CD, and cloud engineering operations.

Preferred Qualifications

• Applying automation to reduce compliance burden
• Experience building and implementation internal control programs
• Experience processing FedRAMP significant change requests (SCR)
• Excellent verbal, written and interpersonal communication skills with both technical and non-technical audiences
• CISSP, CISA, and similar certifications are a plus 
• Cloud certifications are a plus

Ideal candidate will thrive in our culture if they have a passion for:

• Building quality products with a mindset on safety and security
• Operating in a fast-moving and high-growth environment
• Working as a team player with an entrepreneurial work ethic
• Security, learning and continuous improvement

Note that candidates must be located in the continental U.S.

ID.me Covid Vaccination Requirement