Principal Security GRC Analyst
Rescale · Remote · Remote (United States) ·
COMPENSATION
$118k – $174k
Listed on the employer's job board (Ashby)
- Principal level role
- Fully remote (US)
- FedRAMP + ISO 27001
- US Citizenship required
- 8+ years experience
You will drive control implementation and cross-framework harmonization as a senior individual contributor within the Compliance team. This position focuses on end-to-end ownership of complex compliance problems, from design to auditor engagement, supporting Rescale's digital engineering mission.
What you'll do
- Mature security governance, risk, and compliance programs under director guidance
- Engage directly with auditors and government officials across various frameworks
- Leverage AI to ensure product compliance with new and existing standards
- Manage large-scale compliance projects spanning months or years
- Collaborate with security and IT teams to gather audit evidence
- Translate compliance requirements into practical controls with engineering teams
- Represent compliance in customer discussions and due diligence reviews
- Draft policies to improve compliance and privacy standards
- Automate processes for policy dissemination and knowledge management
What you'll need
- At least 8 years of experience with multiple compliance frameworks and audits
- Deep expertise in SOC 2 Type II, ISO 27001, FedRAMP, or NIST SP 800 series
- Proven ability to manage complex implementation projects in tech environments
- Must hold US Citizenship due to the nature of the work
Nice to have
- Exposure to GDPR, ITAR, EAR, NISPOM, or CMMC regulations
- Holding certifications such as CISM, GSLC, Security+ CE, or CISSP
- Willingness to expand scope beyond security compliance as team evolves
Stack
- FedRAMP
- DoD IL5
- CMMC Level 2
- SOC 2 Type 2
- ISO 27001:2022
- TISAX AL2
- NIST SP 800
- AI tools
How you'll work
- High-autonomy individual contributor role
- Remote work environment
- Requires US Citizenship