Director of Governance, Risk and Compliance

Your impact

Lead Atmosera’s internal GRC program and its Managed GRC services for clients.

Deliverables include

• GRC program and MGRC service leadership: Lead internal GRC program and Managed GRC services; own methodologies, processes, templates, evidence, and quality; lead risk and control assessments, compliance readiness, policy governance, Managed Audit, Managed Questionnaires; manage client commitments, capacity, and quality; automation and AI for GRC delivery; partner with Sales and Client Success on scoping, SOWs, and pricing
• Federal compliance and SSP management: Lead and maintain System Security Plans for federal clients; control implementation statements and evidence; POA and Ms and remediation; responses to government and assessor findings; support NIST SP 800-53, 800-171, FISMA, CMMC, FedRAMP concepts
• Risk, compliance and audit management: Support SOC 2, NIST, CIS, ISO 27001, PCI DSS, HIPAA, CMMC, Microsoft security benchmarks
• Internal GRC: Partner with CISO on internal program (SOC 2 Type 2)
• Client advisory and technical alignment: Senior GRC advisor to clients; map controls to Azure, Entra ID, Defender, Sentinel, Intune, Purview, Azure Policy
• Team leadership: Lead and mentor GRC Analysts and Consultants

What success looks like

Effective GRC delivery, client satisfaction, audit readiness.

How we show up

Humble, Hungry, Mindful.

Our interview process

Multi-stage interview process.

Benefits

• Competitive salary plus bonus potential
• 401(k) 100% match up to 4%
• 100% employer-paid health, vision, dental for employees
• Company-paid life, AD and D, disability
• 3 weeks PTO; 11 paid holidays
• Community service leave
• Recognition program