Director of Governance, Risk and Compliance at Atmosera. Location Information: United States. Overview. Your impact. Lead Atmosera’s internal GRC program and its Managed GRC services for clients.. Deliverables include. GRC program and MGRC service leadership:. Lead internal GRC program and Managed GRC services; own methodologies, processes, templates, evidence, and quality; lead risk and control assessments, compliance readiness, policy governance, Managed Audit, Managed Questionnaires; manage client commitments, capacity, and quality; automation and AI for GRC delivery; partner with Sales and Client Success on scoping, SOWs, and pricing. Federal compliance and SSP management:. Lead and maintain System Security Plans for federal clients; control implementation statements and evidence; POA and Ms and remediation; responses to government and assessor findings; support NIST SP 800-53, 800-171, FISMA, CMMC, FedRAMP concepts. Risk, compliance and audit management:. Support SOC 2, NIST, CIS, ISO 27001, PCI DSS, HIPAA, CMMC, Microsoft security benchmarks. Internal GRC:. Partner with CISO on internal program (SOC 2 Type 2). Client advisory and technical alignment:. Senior GRC advisor to clients; map controls to Azure, Entra ID, Defender, Sentinel, Intune, Purview, Azure Policy. Team leadership:. Lead and mentor GRC Analysts and Consultants. What success looks like. Effective GRC delivery, client satisfaction, audit readiness.. How we show up. Humble, Hungry, Mindful.. Our interview process. Multi-stage interview process.. Benefits. Competitive salary plus bonus potential. 401(k) 100% match up to 4%. 100% employer-paid health, vision, dental for employees. Company-paid life, AD and D, disability. 3 weeks PTO; 11 paid holidays. Community service leave. Recognition program.
Director of Governance, Risk and Compliance at Atmosera