GRC Technical Program Manager, ID.me

• A unique requirement of this role is high proficiency with AI tools; our team utilizes purpose-built AI agents for evidence validation, control evaluation, and finding management
• 3+ years of experience operating security or compliance programs aligned to FedRAMP or NIST 800-53
• 2+ years leading internal or external audits end-to-end, either as audit manager, program owner, or auditor
• Experience managing control lifecycles, POA&M remediation, and continuous monitoring in a cloud-native environment (AWS or GCP)
• Hands-on experience with a GRC platform (LogicGate preferred) for control tracking, evidence management, and findings remediation
• Demonstrated professional use of AI tools to support drafting, analysis, evaluation, or workflow automation within compliance or technical programs

Desirable

• ID.me is seeking a Technical Program Manager – Security Assurance to serve as the operational backbone of our external compliance programs
• You will co-own the end-to-end lifecycle of controls, policies, and program-specific documentation for FedRAMP, ISO 27001, and SOC 2, with additional contributions to Kantara accreditation
• You will drive cross-functional alignment independently, owning outcomes rather than tasks
• Fluency in AI-assisted workflows is essential