Lead external audit engagements for Fidelity’s cybersecurity controls, ensuring compliance with industry frameworks and achieving unqualified audit opinions.
Compensation
The base salary range for this position is $107,000-216,000 USD per year.
Responsibilities
Lead and manage end-to-end external audit engagements
Ensure adherence to SOC, PCI-DSS, HITRUST, Swift CSP, ISO/IEC 27000, and NIST frameworks
Communicate audit progress and findings to stakeholders
Coordinate with independent third‑party audit firms
Maintain control environment documentation and evidence
Requirements
Bachelor’s degree in a technology or computer science subject area
The DevOps Engineering Advisor is a senior, hands-on individual contributor responsible for the design, management, and continuous improvement of MRO’s cloud environments, with a primary focus on Microsoft Azure and Google Cloud Platform (GCP) and secondary exposure to Amazon Web Services (AWS).
Compensation
Pay Range
USD $115,000.00 - USD $155,000.00 /Yr.
Responsibilities
Design, deploy, operate, and continuously improve cloud environments in Azure and GCP (and AWS as needed)
Manage cloud identity and access using least-privilege principles (Entra ID and Azure RBAC, GCP IAM, managed and workload identities, identity federation)
Build and maintain cloud networking, including VNets/VPCs, subnets, routing, hub-and-spoke topologies, private endpoints and Private Service Connect, DNS, load balancing, and hybrid connectivity to on-premises and colocation sites
Own capacity planning, lifecycle management, patching, and upgrade planning for cloud-hosted infrastructure and platform services
Apply the pillars of the Azure Well-Architected Framework, Google Cloud Architecture Framework, and AWS Well-Architected Framework to new and existing workloads
Requirements
Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience
Nice to have: AWS
Nice to have: Microsoft Certified: Azure Solutions Architect Expert
Design and validate secure architectures across cloud and hybrid environments, lead security architecture assessments, and collaborate with product engineering, DevOps, and compliance teams.
Responsibilities
Lead security architecture assessments for new and existing applications, systems and integrations
Partner with product engineering, DevOps, and compliance teams to develop secure architecture patterns
Assess and validate security requirements based on emerging information technologies
Participate in threat modeling exercises to identify security risks
Function as a subject matter expert across multiple security domains
Requirements
Bachelor’s degree in Computer Science, Cyber Security, Information Systems, or a related field
Help clients enhance their business performance by translating their strategies into realities through Third-Party Risk Management (TPRM) engagements.
Responsibilities
Lead and work closely with the manager in the delivery of Third-Party Risk Management (TPRM) engagements
Lead the design and implementation of TPRM operating models, identifying, evaluating, and providing solutions to evaluate complex business and technology risks
Follow policies and procedures that support the successful implementation of TPRM operating models
Facilitate process walkthrough discussions to document end-to-end business processes and functional requirements
Performs end-to-end Third-Party Risk Assessment (TPRA) including the Inherent Risk Assessment (IRA)
Requirements
Continual educational program for personal skills development
Build and operate AI infrastructure on Azure, develop and deploy AI models and agents, ensure compliance with healthcare data regulations, and mentor engineering teams.
Responsibilities
Provision AI infrastructure on Azure as code
Stand up open-weight and frontier models
Develop technical policies and controls
Run shared model access across providers
Build sandboxed environments for coding agents
Requirements
Bachelor's Degree in Computer Science, Engineering or a related field
The Federal Account Executive is a high-impact, individual contributor role responsible for driving Schellman’s growth by closing new deals and converting prospects into long-term customers.
Responsibilities
Own a quota carrying role with full responsibility for the end-to-end sales cycle for net new clients
Develop a disciplined, analytical approach to account segmentation and prioritization
Creatively build awareness of Schellman’s unique value proposition through targeted outreach, marketing collaboration, and strategic networking
Leverage success stories, market intelligence, and Schellman’s differentiated Compliance, Attestation, and Audit services to drive meaningful engagement
Partner with Marketing, Subject Matter Experts, and the Partner Ecosystem to position Schellman as the trusted leader in compliance and cybersecurity
Requirements
Bachelor’s degree in business, technology, or a related field
Support and maintain compliance with regulatory and industry frameworks, coordinate audits, develop policies, conduct risk assessments, and manage security incidents.
Responsibilities
Support and maintain compliance with regulatory and industry frameworks, including HITRUST, SOC, HIPAA, and URAC
Coordinate internal and external security audits and assessments, including evidence collection, documentation, and remediation tracking
Develop, review, and maintain information security policies, procedures, standards, and compliance documentation
Conduct risk assessments and gap analyses to identify vulnerabilities, evaluate security controls, and recommend improvements
Maintain risk registers, control inventories, audit records, and other compliance-related documentation
Requirements
Bachelor's degree in Information Technology, Cybersecurity, or a related field
A hands-on senior individual contributor role owning the path from merged code to production, focusing on deployment automation, security, compliance, and infrastructure scaling.
Compensation
$165,000–$195,000 base, depending on experience
Responsibilities
Own CI/CD for Cloud Run services and Cloud Functions, replacing manual deploys with automated, gated release pipelines
Manage production releases, hotfixes, and new environment setup during US hours
Build reusable Terraform modules for GCP and AWS infrastructure, services, and customer environments
Manage cloud infrastructure including Cloud SQL, Memorystore, Pub/Sub, API Gateway, Cloud Armor, Artifact Registry, Secret Manager, BigQuery, networking, DNS, TLS, and load balancing