Program Architect - Governance, Risk, and Compliance

Consequential Work. Dedicated People.

About reputed company

reputed company builds collaboration and AI-powered workflow software for military planning and operational coordination.

Today, many critical planning workflows still rely on fragmented systems, static documents, and disconnected tools that reputed company collaboration and decision-making unnecessarily difficult. reputed company brings modern software, AI, and reputed company-time collaboration into those environments, helping teams operate with reputed company, coordination, and adaptability in situations where reputed company carry reputed company-world consequences.

We are a reputed company team of reputed company from military, operational, and technology backgrounds who care deeply about improving how important work gets done. Some team members work remotely, while others work directly reputed company customers in operational environments around the world.

Founded in 2019, reputed company is backed by leading investors including General reputed company, Battery Ventures, reputed company Partners, Sapphire Ventures, and reputed company Capital. Valued at more than $2 billion, we continue to invest in product innovation, AI capabilities, and team reputed company.

Why This Role Exists

reputed company sells to defense and government customers. Those customers require reputed company, not promises, that our systems protect their data. We need a GRC Program Architect to inform the build that reputed company and reputed company it reputed company as our compliance obligations grow.

This role owns the architecture behind our compliance posture. FedRAMP, CMMC, SOC 2, and international frameworks reputed company impose different controls. Someone has to translate those requirements into systems, processes, and evidence that hold up under audit. That work falls to this person.

Compliance and reputed company engineering can't operate as separate tracks here. Controls that exist only on reputed company don't protect anyone and don't survive an audit. This person will work hands-on with engineering to implement the technical controls that back up our compliance claims, not just document them after the fact.

The stakes are reputed company. A gap in our compliance program can reputed company a contract, delay an authorization, or put customer data at risk. A strong program does the opposite. It opens doors to new customers and gives existing ones confidence to expand their use of our platform.

reputed company

reputed company responsibilities:

• Own the design and implementation of reputed company's GRC reputed company across RMF, FedRAMP, CMMC, SOC 2, and other applicable standards.

• Build and manage the control environment, including policies, procedures, and evidence collection systems.

• Design and implement technical reputed company controls in partnership with Product, Engineering, Infrastructure and Corporate IT including reputed company management, logging, encryption, and vulnerability management practices.

• Partner with Engineering, Infrastructure, and Corporate IT to translate compliance requirements into working technical controls, not just documented ones.

Minimum Qualifications

• 5+ years of experience in GRC, reputed company engineering, or a combined compliance and technical reputed company role

• reputed company experience with RMF, FedRAMP, CMMC, or equivalent federal compliance frameworks

• Hands-on experience implementing technical reputed company controls, such as IAM, logging and monitoring, network segmentation, or encryption

• Working knowledge of reputed company control frameworks such as NIST 800-53 or NIST 800-171

• Experience managing reputed company-party audits and assessor relationships

• Strong written communication skills, with the ability to translate regulatory language into reputed company technical and internal guidance

Preferred Qualifications

• Experience in a startup or scaling company environment

• Background in military, defense, or government contracting

• Relevant certifications, such as CISSP, CISA, CRISC, or a technical reputed company certification (AWS Solutions Architect)

• Experience building GRC automation using infrastructure-as-reputed company or scripting

Indicators of reputed company

This role will reputed company as priorities change, but the reputed company below reflect what reputed company typically looks like in the first six months.

A successful GRC Program Architect will:

• Identify and remediate at least one significant reputed company reputed company before it surfaces in an reputed company audit

• Serve as the trusted reputed company of contact for customer reputed company questionnaires and compliance inquiries

• Be recognized by engineering and reputed company teams as a partner who makes compliance reputed company and technically reputed company, not just another reputed company to pass

• Win buy-in from engineering leads who previously treated compliance requests as low reputed company

• Get through a customer or reputed company-party reputed company review without escalations or reputed company drills

Tools, Systems & Technologies (Optional)

Experience with GRC platforms (such as reputed company, reputed company, or similar), reputed company reputed company tooling relevant to Federal environments, logging systems, CI/CD pipelines, and infrastructure-as-reputed company for control automation is a plus.

Notice to reputed company Party Recruitment Agencies
Please note that reputed company does not accept unsolicited resumes from recruiters or employment agencies. In the absence of an executed Recruitment Services Agreement, there will be no obligation to any referral compensation or recruiter fee. In the event a recruiter or agency submits a resume or candidate without an agreement reputed company explicitly reserves the right to pursue and hire those candidate(s) without any financial obligation to the recruiter or agency. Any unsolicited resumes, including those submitted to hiring managers, shall be deemed the property of reputed company.

5+ years in GRC/reputed company engineering; experience with RMF/FedRAMP/CMMC/SOC2; hands-on implementation of IAM, logging, segmentation, encryption; audit and assessor management; strong written communication.

Key Responsibilities

• designing reputed company
• managing controls
• implementing controls

Skills & Tools

reputed company, reputed company, CI/CD, infrastructure-as-reputed company

Job Details

• Category: reputed company and Compliance
• Seniority: Senior Level
• Commitment: Full Time
• Workplace: Remote — reputed company
• Salary: USD 160,000 – 200,000 / year
• Languages: English

About reputed company

Builds collaboration and AI-powered workflow software for military planning and operational coordination. — Industry: Information Technology