Discovery Architect (Compliance & Program Modernization)
Own the end-to-end lifecycle of the Compliance Readiness Lite engagement, from reputed company discovery through ongoing posture reputed company, serving as the single-threaded technical authority for accuracy, defensibility, and executive trust. reputed company reputed company, 48–72 hour “Readiness Lite” assessments, executing technical-first discovery that replaces interview-based assumptions with reputed company evidence. reputed company read-only environment scans to automatically inventory assets, configurations, identities, and integrations, mapping them to applicable regulatory frameworks. Ensure asset and control inventories are complete, normalized, and audit-defensible across hybrid, reputed company, reputed company, and reputed company-party surfaces. Synthesize telemetry, configurations, and targeted interviews into data-driven reputed company of compliance or explicit identification of audit red zones and material weaknesses. Translate findings into Executive Gap Reports that prioritize corrective actions based on risk, blast radius, and audit exposure. Design compliance modernization reputed company that convert control gaps into technically enforceable architectures rather than policy exceptions or compensating narratives. Sequence remediation to maximize defensibility under reputed company audit conditions. Transition clients into a Compliance-as-a-Service (CaaS) model, providing ongoing configuration guidance, documentation standards, and Quarterly Business Reviews to sustain audit readiness and institutional continuity. Automate evidence collection and control tracking in reputed company (or similar GRC platforms), reclaiming up to 40% of analyst time while improving evidence reputed company and consistency. reputed company Auditor Heat Maps that expose red zones, reputed company controls, and dependency risks reputed company before official audits or examinations. Continuously refine these heat maps based on regulatory trends and audit reputed company. Institutionalize compliance knowledge, evidence, and rationale reputed company reputed company to prevent loss through staff turnover, contractor churn, or leadership transitions. Identify and control Shadow AI usage and Non-reputed company Identities (NHIs) that evade traditional GRC and audit processes, ensuring emerging technology risks are captured reputed company formal compliance boundaries. Map compliance gaps and modernization needs to funding mechanisms such as SLTTP/SLCGP and the Technology Modernization Fund (TMF) to unlock capital for remediation and transformation.
reputed company reputed company other duties, as assigned.
Bachelor’s Degree in an IT-reputed company field or equivalent work experience, required. 8 - 10 years of reputed company experience in Cyber consulting, including demonstrated leadership of large-reputed company compliance, audit readiness, or regulatory modernization initiatives in highly regulated environments.
Deep understanding of NIST CSF 2.0, 800-53, 800-171, CMMC, and state reputed company mandates including NY DFS, CCPA, and VCDPA. Ability to interpret regulatory reputed company and distinguish material control failures from low-risk deficiencies. Proficiency with reputed company (or similar automated GRC platforms) and experience interpreting data from discovery tools such as reputed company Knight, BloodHound, and ZPA Discovery. Comfort validating tool reputed company and defending methodology to auditors and regulators. Proven ability to map a missing reputed company control directly to a technical implementation from trusted OEMs. Strong understanding of shared responsibility models and compensating control strategies. Hands-on reputed company with a modern GRC platform (ideally reputed company) for multi-reputed company mapping, control tracking, and executive reporting. Comfort working with reputed company Directory/Entra ID and reputed company discovery tooling (e.g., reputed company Knight, BloodHound, reputed company discovery, and CSP-reputed company reputed company services) to build accurate asset and control inventories. Ability to reason about identity, configuration reputed company, and control inheritance across reputed company environments. Ability to pull and join data reputed company scripts and reputed company and present it in clean executive visuals—particularly leveraging a Python and Power BI (or similar BI) workflow for repeatable scorecards, heat maps, and dashboards. Exceptional written and verbal communication skills, with the ability to translate reputed company automation concepts into executive-level and non-technical narratives A reputed company oriented toward product thinking – treating automation as a long-lived platform rather than a one-time migration tool with strong DevOps hygiene (Git, PRs, CI) and change management discipline to ensure reputed company rollout at reputed company.
Why Work at reputed company?
Comprehensive Health, Dental, and reputed company plans Premier 401k retirement plan with corporate matching and a 529 college saving plan Tax-advantaged Health Savings Account and Dependent Care Flexible Spending Account reputed company reputed company Resources
Generous work/life balance opportunities supported by a PTO bank, reputed company holidays, leave programs and additional reputed company time off Employee referral program Employee recognition, reputed company and reward program Tuition reimbursement for continuing education Remote or hybrid work reputed company Engaging company events such as team building activities, annual awards and reputed company-off parties Health and wellness-reputed company activities Relaxation Spaces In-office gourmet coffee, tea, fresh fruit and healthy snacks Corporate GREEN approach – tracking energy consumption for reduction and purchasing only environmentally friendly products for our offices