Principal Security GRC Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and manage a thorough security governance, risk, and compliance program.

• Collaborate directly with auditors and government representatives regarding NIST SP 800 series, FedRAMP, SOC 2, ISO 27001, Cyber Essentials, CSA, and other frameworks.

• Leverage AI to ensure Rescale products adhere to both new and established frameworks.

• Take ownership of and lead long-term, quarterly, and multi-year compliance implementation initiatives.

• Collect audit evidence from security, IT, and various teams.

• Work alongside engineering, product, platform, and other teams to convert compliance requirements into actionable controls.

• Represent the compliance program during customer interactions, security questionnaires, and due diligence assessments.

• Compose policies and procedures aimed at enhancing compliance and privacy.

• Design, implement, and oversee automated processes for distributing security, compliance, and privacy policies, procedures, plans, and knowledge.

• Potentially broaden responsibilities beyond security compliance as the team develops.

⛳️ Requirements

• A minimum of 8+ years of experience with various compliance frameworks and audits, including the ability to adapt to changes and manage complex implementation projects.

• Profound knowledge in at least one security framework, such as SOC 2 Type II, ISO 27001, FedRAMP, or NIST SP 800 series.

• Familiarity with GDPR, ITAR, EAR, NISPOM, CMMC, and other frameworks and regulations is advantageous.

• Relevant certifications such as CISM, GSLC, Security+ CE, or CISSP are beneficial.

• US Citizenship is mandatory.

• Highly detail-oriented, motivated, self-driven, and capable of organizing intricate projects.

• Openness and eagerness to broaden the range of responsibilities is preferred.

🏝️ Benefits

• Equity.

• Comprehensive background check as part of the standard hiring process.

• Equal-opportunity employment.

• Supportive team environment.

• Opportunity to engage in high-impact, high-autonomy projects.