Technical Lead Cyber Security

@ Mdf commerce

About Technical Lead Cyber Security

SOVRA is a leading public procurement platform serving over 7,000 government agencies and connecting them with more than 1 million suppliers across North America. Their platform is purpose-built to address the unique challenges of public procurement with a strong focus on compliance, efficiency, and transparency.

Primary Responsibilities

In this role, you will:

• Lead audit readiness and annual cycles for SOC 2 Type 2, PCI DSS, and FISMA RMF.
• Plan and execute internal/external audits including evidence strategy and remediation tracking.
• Operate and improve the customer trust portal meeting SLAs for security questionnaires.
• Run vulnerability management across cloud, endpoints, applications, and containers while reporting metrics to leadership.
• Maintain control inventory and map controls to frameworks (NIST SP 800-53, FedRAMP, GovRAMP, etc.).
• Drive policy and standard lifecycle management, risk management, and coordinate incident response readiness.
• Collaborate with Legal, Privacy, Engineering, IT, and Product to meet regulatory obligations.
• Manage vendor third-party risk management and ensure identity and access management standards.

Required Experience & Qualifications

A minimum of 10 years experience in information security with hands-on GRC and technical expertise are required. Deep knowledge of SOC 2, PCI DSS, FISMA RMF, and additional certifications including CISSP, CISM, CISA, and CRISC is expected. Experience in trust portal development, vulnerability management platforms and various GRC tools is essential. Must be authorized to work in the US.

Desired Attributes

The ideal candidate demonstrates excellent communication skills, strong ownership, and the ability to work both independently and within cross-functional teams. Proficiency with AWS security tools, SIEM, EDR, and other security technologies is a plus.

Key skills/competency

• SOC 2
• PCI DSS
• FISMA RMF
• GRC
• Vulnerability Management
• Risk Management
• Incident Response
• Trust Portal
• AWS Security
• Compliance