Job Description
About usOligo is a fast-growing cybersecurity startup transforming how organizations protect their applications, cloud environments, and AI systems at runtime. Backed by top-tier investors including Greenfield Partners, Red Dot Capital Partners, Lightspeed, Ballistic Ventures, and TLV Partners, we’re on a mission to make real-time security a reality.Oligo’s industry’s leading runtime security platform built to stop attacks in real time without stopping the business. We transform security from passive visibility to active protection across applications, cloud services, workloads, and AI systems. By uncovering the deepest layers of what actually runs in production, Oligo helps organizations prioritize exploitable vulnerabilities, detect malicious behavior as it happens, and stop modern attacks in their tracks.We're looking for a GRC Specialist to own and drive our compliance and authorization programs, with a strong emphasis on FedRAMP and NIST 800-53. This is a hands-on governance, risk, and compliance role for someone who can build and run a federal-grade compliance program from the ground up and manage it through continuous monitoring and reauthorization cycles.U.S. citizenship is required for this role due to FedRAMP and federal customer requirements.Key ResponsibilitiesOwn the FedRAMP process end-to-end: System Security Plan (SSP) development and maintenance, POA&M tracking and remediation, control implementation statements, and continuous monitoring (ConMon) deliverablesServe as primary point of contact for 3PAO assessments, coordinating testing, evidence collection, and finding resolutionMaintain compliance programs across SOC 2 Type II and ISO 27001Respond to customers security questionnaires, and support sales enablement with SSPs, control narratives, and other security documentationPartner with engineering, GTM, and leadership to ensure controls are implemented, evidenced, and operating effectivelyMonitor changes to FedRAMP requirements, NIST guidance, and federal compliance obligations, and translate them into actionable program updates