GRC Director

📋 Description

• Proactively manage key compliance frameworks (ISO27001, SOC2, FedRAMP).
• Develop and operationalize security, risk, and privacy policies.
• Own the risk quantification and risk management program.
• Lead responses to client audits and RFPs/RFIs.
• Promote a culture of information security across the org.
• Oversee third-party risk assessments and audit activity.

🎯 Requirements

• 7+ years in information security or data privacy compliance.
• Hands-on with FedRAMP, CMMC, ISO27001, SOC 2, and NIST CSF.
• Strong knowledge of global privacy regs (CCPA, GDPR, HIPAA, UK DPA).
• Excellent communication and leadership; pragmatic problem solver.
• Experience with audits, client requests, and third-party risk.
• Ability to scale GRC tactics with repeatable processes.

🎁 Benefits

• Equity awards
• Medical, dental, and vision coverage
• Health savings and flexible spending accounts
• 401(k) with company match
• Life, disability, and travel insurance
• Volunteer time off (VTO)