Director/Senior Director of Compliance

Responsibilities

• Own the full compliance portfolio, including FedRAMP (Moderate), SOC 2 Type II, ISO 27001, IRS Pub 4812, and NIST 800-63.
• Build, grow, and lead a high-performing compliance team, focusing on career development and sustainable output.
• Drive an aggressive automation strategy to consolidate controls and transform evidence collection into an automated byproduct of engineering workflows.
• Serve as a strategic partner to Engineering, Product, Legal, and Privacy teams, building trust through collaboration rather than gatekeeping.
• Maintain continuous audit readiness and manage relationships with 3PAOs, external assessors, and government agencies.
• Integrate compliance findings into a unified cyber risk register in partnership with the Risk team.

Requirements

• Proven experience in people leadership, including building and scaling compliance or security teams.
• Strong conviction in compliance automation and experience championing tooling to reduce manual toil.
• Exceptional communication skills with the ability to provide crisp, strategic answers to diverse audiences (engineers to board members).
• A partnership-oriented mindset that defaults to finding safe ways to enable business velocity.
• Ability to operate with high autonomy and self-directed execution in a fast-paced environment.

Preferred Qualifications

• Direct experience with FedRAMP (Moderate or High) or NIST 800-53 frameworks.
• Experience building or significantly improving compliance automation pipelines or GRC platform integrations.
• Proficiency with GRC platforms (e.g., Drata, Vanta, LogicGate) and AI/ML tools for workflow optimization.
• Relevant certifications such as CISA, CISSP, CRISC, or CISM.
• Experience operating within growth-stage or mid-stage technology companies.

About the Company

ID.me is a next-generation digital identity wallet that simplifies how individuals securely prove their identity online. With over 152 million users, ID.me provides seamless identity verification for 20 federal agencies, 45 state government agencies, and over 70 healthcare organizations. We are committed to the mission of "No Identity Left Behind," ensuring everyone has access to a secure digital identity.