about 7 hours ago
Remote, WorldwideSenior
Base Salary
$160k - $200k/yr
Responsibilities
- Own the design and implementation of Onebrief's GRC framework across various compliance standards.
- Build and manage the control environment, including policies and evidence collection systems.
- Design and implement technical security controls in partnership with engineering and IT teams.
- Translate compliance requirements into working technical controls.
Requirements
- 5+ years of experience in GRC, security engineering, or a combined compliance and technical security role.
- Direct experience with RMF, FedRAMP, CMMC, or equivalent federal compliance frameworks.
- Hands-on experience implementing technical security controls such as IAM and encryption.
- Working knowledge of security control frameworks like NIST 800-53 or NIST 800-171.
- Experience managing third-party audits and assessor relationships.
- Strong written communication skills to translate regulatory language into clear guidance.