Principal Governance, Risk and Compliance Architect

This is a fully remote position, open to applicants in Germany.

📋 Description

• Ensure Continuous Monitoring: Maintain our SOC 2 Type II compliance through automated oversight, making adherence a continuous process rather than a yearly task.

• Technical Infrastructure Framework: Meet the stringent technical specifications of ITAR and FedRAMP, which encompasses overseeing the transition to AWS GovCloud, establishing network security parameters, and confirming that encryption and IAM protocols align with federal standards.

• Bridge the "Speed vs. Standard" Divide: Serve as a technical facilitator for the Engineering team by designing and implementing controls (such as change management and access reviews) that satisfy auditor requirements without hindering the productivity of Engineering or DevOps teams.

• Lead International Growth: Design and implement the technical and procedural aspects required for TISAX, ITAR, and FedRAMP compliance.

• GDPR Custodianship: Function as the internal expert on privacy, ensuring that our data mapping and PIAs are up-to-date without introducing unnecessary obstacles.

• Build Customer Trust & Support Sales: Participate in discussions with customer Infosec representatives and address technical vendor questionnaires to demonstrate that our security measures are trustworthy for the most demanding organizations worldwide.

• Individual Contributor Accountability: Operate as a "one-person department," responsible for writing policies, conducting risk assessments, and managing audits independently.

⛳️ Requirements

• Technical AWS Expertise: You possess in-depth knowledge of AWS configuration that goes beyond mere evidence collection. You are well-acquainted with GovCloud, VPC isolation, network security, and IAM architecture.

• Mastery of Standards: You have expert-level proficiency in at least two of the following: TISAX, ITAR, or FedRAMP. You have previously guided a company through these audits or were charged with maintaining compliance.

• Knowledge of Privacy & AI: You have a thorough understanding of GDPR and an active interest in the changing landscape of AI regulations.

• The "Translator" Ability: You can interpret strict regulatory requirements into practical technical tasks that are clear to developers.

• Self-Sufficiency: You thrive on taking initiative and managing the entire lifecycle of a program without a team for delegation.

• Communication Skills: You possess excellent English language skills, enabling effective negotiation with both internal engineers and external auditors.

🏝️ Benefits

• Enjoy flexible working hours and the option to work remotely from any location around the globe.

• Access comprehensive health benefits, retirement plans, paid vacation, and wellness support.

• Stay active with subsidized gym memberships, sports events, and wellness initiatives.

• Enhance your professional development through online and offline learning opportunities, language courses, and tech discussions.

• Engage with team gatherings, join support networks, and contribute to our ESG and DE&I efforts.

• Take part in enjoyable team challenges and competitions to boost excitement and camaraderie.

• Work within a multicultural team (over 35 nationalities), with flexible working arrangements and relocation and visa support as needed.