Principal Governance, Risk and Compliance (GRC) Architect

This is a fully remote position, open to applicants anywhere in the world.

📋 Description

• Ensure Continuous Observation: Maintain our SOC 2 Type II standard through automated monitoring, guaranteeing that compliance is an ongoing process rather than a yearly task.

• Technical Infrastructure Strategy: Directly address the stringent technical requirements of ITAR and FedRAMP.

• Bridge the "Speed vs. Standard" Gap: Serve as a technical facilitator for the Engineering team by designing and implementing controls (such as change management and access reviews) that meet auditor requirements while avoiding bottlenecks for our Engineering and DevOps teams.

• Lead Global Expansion: Plan and execute the technical and procedural adoption of TISAX, ITAR, and FedRAMP.

• GDPR Stewardship: Serve as the internal expert on privacy, ensuring our data mapping and PIAs are up-to-date without introducing unnecessary obstacles.

• Customer Trust & Sales Support: Participate in discussions with customer Infosec representatives and manage technical vendor questionnaires to demonstrate our security posture is trustworthy for the world’s most demanding enterprises.

• Individual Contributor Ownership: Operate as a "department of one," taking responsibility for writing policies, conducting risk assessments, and managing audits independently.

⛳️ Requirements

• Technical AWS Depth: Proficient in configuring AWS beyond basic evidence collection.

• Standard Mastery: Possess expert-level knowledge in at least two of the following: TISAX, ITAR, or FedRAMP.

• Privacy & AI Knowledge: Hold a comprehensive understanding of GDPR along with a keen interest in the evolving landscape of AI regulation.

• The "Translator" Skillset: Capable of converting strict regulatory requirements into actionable technical tasks that are clear to developers.

• Independence: Driven by the prospect of "getting your hands dirty" and managing the entire lifecycle of a program without a team to delegate tasks to.

• Communication: Exceptional proficiency in English, with the ability to negotiate effectively with both internal engineers and external auditors.

🏝️ Benefits

• Enjoy flexible hours and the ability to work remotely from any location worldwide.

• Access to comprehensive health insurance, retirement plans, paid time off, and wellness support.

• Stay active with subsidized gym memberships, sports meetups, and wellness initiatives.

• Advance as a professional with online and offline learning opportunities, language courses, and tech talks.

• Engage in team events, join support groups, and participate in our ESG and DE&I initiatives.

• Take part in enjoyable team challenges and competitions to foster excitement and camaraderie.

• Be part of a multicultural team with over 35 nationalities, benefiting from flexible work, and relocation and visa support where applicable.