Head of Trust and Secirty

Filevine is a Legal AI company delivering Legal Operating Intelligence for the future of legal work. Grounded in a singular system of truth, Filevine brings together data, documents, workflows, and teams into one unified platform—where modern legal work happens with clarity and consistency. Powered by **LOIS**, the Legal Operating Intelligence System, Filevine connects context across every matter to transform legal operations from reactive to proactive. LOIS reads, understands, and reasons across your data to surface insight, automate complexity, and give professionals the clarity and confidence to see more, know more, and do more. Fueled by a team of exceptional collaborators and innovators, Filevine’s rapid growth has earned AI awards and recognition from Deloitte and Inc. as one of the most innovative and fastest-growing technology companies in the country. ### Role Overview The Head of Trust, Security Compliance, Privacy & FedRAMP is a senior leadership role accountable for Filevine’s highest-trust security, compliance, privacy, and government authorization initiatives. This leader owns the operating system that turns regulatory obligations, customer commitments, security risk, and privacy requirements into prioritized, shipped work across Engineering, Security, Product, Legal, Sales, and Customer-facing teams. This is not a coordinator role. The leader will own Filevine’s FedRAMP 20x Moderate strategy and execution, with dedicated engineering resources assigned specifically to FedRAMP compliance. They will set the compliance engineering roadmap, define evidence and automation requirements, drive cross-functional execution, and hold stakeholders accountable for measurable outcomes. The first mission for this role is to accelerate Filevine’s FedRAMP 20x Moderate readiness and ongoing compliance posture as meausered by booked ARR, logos closed, pipeline conversion and customer adoption. This includes evidence automation, control implementation, continuous monitoring, vulnerability and remediation governance, POA&M discipline, 3PAO and FedRAMP PMO engagement, agency-facing readiness, and executive-level risk reporting. Beyond FedRAMP, this leader owns Filevine’s broader trust and compliance stack, including security compliance, privacy operations, customer trust commitments, audit readiness, and the internal processes that keep these programs scalable. They must be able to operate at both strategic and execution levels: translating regulatory frameworks into technical work, aligning leaders around risk-based priorities, and communicating clearly with executives, auditors, customers, and engineering teams. Operating in a hypergrowth legal-tech and AI environment, the role requires technical judgment, executive presence, strong prioritization instincts, and the ability to build durable compliance systems rather than one-time audit artifacts. ### Key Responsibilities #### **FedRAMP & Government Compliance Leadership** - Own Filevine’s FedRAMP 20x Moderate strategy, delivery plan, certification readiness, and ongoing compliance posture. - Lead the design and execution of FedRAMP evidence automation, continuous monitoring, and reporting required for Marketplace certification and sustained authorization. - Serve as the single-threaded owner for FedRAMP engagements with 3PAOs, the FedRAMP PMO, agency stakeholders, and internal executive sponsors. - Set the roadmap and priorities for dedicated FedRAMP engineering resources, ensuring regulatory requirements become shipped technical controls, automated evidence, and operationally sustainable processes. - Own POA&M governance, risk acceptance workflows, certification readiness reporting, and remediation planning across product and platform teams. - Ensure FedRAMP implementations are pragmatic, risk-based, technically grounded, and appropriately scoped for Filevine’s architecture, maturity, and business priorities. - Provide clear, consistent executive reporting on progress, risk, trade…