Governance, Risk, and Compliance Engineer

This is a fully remote position, open to applicants in Washington.

📋 Description

• Oversee the entire lifecycle, planning, execution, and enhancement of security certifications such as ISO 27001, SOC 2, and the NIST 800 series.

• Establish, implement, and manage compliance and audit processes while streamlining certification workflows.

• Collaborate with cross-functional teams to minimize certification costs and reduce complexity.

• Facilitate the triage and prioritization of certification requests.

• Manage the onboarding process for audits, including preparation and external assessments.

• Take ownership of the certification roadmap delivery, encompassing reporting and escalations.

• Coordinate continuous compliance audits related to export control.

• Suggest and execute process enhancements for greater efficiency and adherence to evolving standards.

⛳️ Requirements

• A minimum of 8 years of experience in developing and managing certification onboarding programs.

• Proficiency in interpreting and integrating security frameworks into organizational practices.

• Strong understanding of global and regional regulations (EMEA, JAPAC, LATAM, NAM).

• Proven experience in leading both internal and external compliance audits and liaising with certification bodies.

• Familiarity with GRC principles and practical experience in automation implementation.

• Possession of one or more relevant certifications or comparable training: CISSP, CISM, CISA, ISO 27001 Lead Auditor/Implementer, CMMC Certified Professional or Assessor, or NIST Cybersecurity Framework certifications.

• Knowledge of compliance in AWS, Azure, or Google Cloud environments.

• Bachelor's degree in Information Security, IT, Compliance, or a related field, or equivalent professional experience.

• Demonstrated capability to enhance audit processes, focusing on evidence collection, reuse, and stakeholder engagement.

• Understanding of certifications and their relevance to hardware, software, cloud, and enterprise scopes.

• Experience in Big 4 or similar assessment/advisory roles.

• Prior involvement in mergers and acquisitions.

• Knowledge of export control regulations, including ITAR, EAR, and ACS IFR.

• Resume should reflect significant impact in pertinent roles.

🏝️ Benefits

• Equity

• Benefits