Director of Governance, Risk & Compliance
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
GRC Director leading Atmosera’s internal compliance program and managed GRC services. Managing federal SSPs, audits, risk remediation, and technical security control alignment.
Responsibilities:
- Lead Atmosera's internal GRC program and Managed Governance, Risk & Compliance services
- Establish standardized GRC methodologies, processes, templates, evidence requirements, and quality controls
- Lead risk assessments, control assessments, compliance readiness, policy governance, Managed Audit, Managed Questionnaires, and other GRC engagements
- Manage client commitments, priorities, capacity, deliverable quality, and service performance
- Identify opportunities for automation and AI to improve GRC delivery and scalability
- Partner with Sales and Client Success on service scoping, SOWs, pricing, and complex opportunities
- Lead and maintain System Security Plans for federal clients
- Develop and review control implementation statements and supporting evidence
- Coordinate with technical control owners to validate control implementation
- Manage POA&Ms, control deficiencies, remediation activities, milestones, and dependencies
- Coordinate responses to government, assessor, and auditor findings and requests
- Facilitate SSP and control working sessions with clients, engineers, security teams, and stakeholders
- Support continuous monitoring, security assessments, and authorization activities
- Maintain alignment between documented controls and the actual operating environment
- Support requirements involving NIST SP 800-53, NIST SP 800-171, FISMA, CMMC, FedRAMP concepts, and agency-specific requirements
- Lead cybersecurity risk assessments, control gap assessments, risk registers, treatment plans, exceptions, and remediation tracking
- Support SOC 2, NIST, CIS, ISO 27001, PCI DSS, HIPAA, CMMC, and Microsoft security benchmark frameworks
- Own Managed Audit methodology, including audit readiness, evidence management, auditor coordination, findings, and remediation
- Oversee Managed Security Questionnaire delivery and reusable response and evidence libraries
- Ensure policies, standards, procedures, and control documentation reflect operational practices
- Partner with the CISO to operate and mature Atmosera's internal security and compliance program
- Serve as a senior GRC advisor to client security, IT, risk, compliance, and executive leadership
- Translate regulatory and compliance requirements into actionable security improvements
- Partner with Security Operations, Managed Azure, Microsoft 365, and engineering teams to map control requirements to technical implementations
- Maintain working knowledge of Azure, Entra ID, Defender, Sentinel, Intune, Purview, and Azure Policy
- Support vCISO engagements requiring governance, risk, audit, or compliance expertise
- Lead, mentor, and develop GRC Analysts and Consultants
- Manage workload, capacity, priorities, quality assurance, and escalations
- Build repeatable processes that allow the GRC practice to scale
- Complete onboarding, shadow active engagements, and audit current MGRC workflows within 90 days
- Independently own the GRC function, manage the SOC 2 Type 2 program, lead MGRC delivery, and manage complex federal SSP activities within one year
Requirements:
- 8+ years of cybersecurity, GRC, security assessment, audit, or related experience
- Demonstrated experience leading GRC programs or teams
- Hands-on experience with NIST SP 800-53, System Security Plans, POA&Ms, control implementation statements, and federal security requirements
- Experience managing audits, evidence, risk assessments, control gaps, policies, and remediation programs
- Ability to translate regulatory requirements into technical and operational security controls
- Strong client-facing, executive communication, and technical stakeholder management skills
- Experience in an MSSP, MSP, consulting, professional services, federal program, or government contractor environment (preferred)
- Microsoft Azure and Microsoft 365 security experience (preferred)
- CISSP, CISM, CRISC, CISA, CGEIT, or similar certifications (preferred)
Benefits:
- Competitive salaries commensurate with experience and skills
- 100% company match on 401(k) contributions up to 4% of salary
- Performance-based compensation with bonus potential in addition to base salary
- 100% employer-paid health, vision, and dental insurance for employees
- Company-paid life, AD&D, short-term disability, and long-term disability insurance
- Three weeks of paid time off
- 11 paid holidays
- Paid community service leave
- Employee recognition and reward program
- Ability to work from home or from a local US office
Similar Jobs
Compliance Lead, Testing
Compliance Lead administering testing programs and regulatory reviews for Affirm’s buy-now-pay-later products. Identifying control gaps and improving compliance processes across the fintech business.
Senior Manager, Regulatory Affairs – Operations
Senior regulatory operations manager leading eCTD publishing and submission readiness for Telix Pharmaceuticals’ precision-medicine radiopharmaceutical portfolio. Driving docuBridge adoption, compliance, and operational improvements.
Multi-Cloud Security, Compliance Engineer
Multi-cloud security engineer securing OCI and GCP environments for Accenture Federal Services. Ensuring federal cloud deployments meet VA, FedRAMP High, FISMA, and NIST 800-53 requirements.
Senior Compliance Associate
Senior Compliance Associate strengthening Coinbase Canada's AML, KYC, sanctions, and FINTRAC reporting program. Managing cases, risk assessments, regulatory filings, and compliance automation for cryptocurrency operations.
Senior Global Regulatory Scientist
Global Regulatory Scientist leading pharmaceutical clinical-trial regulatory submissions for ICON, a global healthcare intelligence and clinical research organisation. Office or home-based in India.
Lead Director, Coding Audit & Compliance
Leading CVS Health’s coding audit and compliance strategy for healthcare risk adjustment operations. Overseeing governance, regulatory readiness, analytics, technology, vendors, and coding teams.
Senior Compliance Professional, Medicaid
Senior Compliance Professional ensuring Medicaid regulatory compliance for Humana’s healthcare and insurance services. Developing audits, monitoring operations, and coordinating remediation with business leaders and regulators.
Audit Analyst II, Analytic Compliance
Analytic Compliance Audit Analyst II auditing FICO's B2B analytics and myFICO financial education platform. Testing models, data, controls, and compliance risks through investigative analysis.
Senior Manager, Global Regulatory Strategy
Senior Manager shaping global regulatory strategy for Telix’s precision-medicine radiopharmaceutical portfolio. Leading early-stage submissions and health-authority interactions across global markets.
Manager, Regulatory Affairs – Ad-Promo
Regulatory Affairs Manager guiding advertising and promotion compliance for Telix’s radiopharmaceutical cancer and rare-disease products. Reviewing global materials, FDA submissions, and regulatory strategies.
Associate Director, Regulatory Affairs – Regulatory Intelligence
Regulatory intelligence leader monitoring global rules for Telix Pharmaceuticals, a precision radiopharmaceutical company. Translating regulatory developments into strategies, communications, and cross-functional actions.
Associate Director, Regulatory Affairs – Regulatory Intelligence
Associate Director monitoring global pharmaceutical regulations for Telix Pharmaceuticals, a radiopharmaceutical precision-medicine company. Driving regulatory strategy, intelligence communications, and cross-functional compliance for oncology and rare-disease products.
Compliance Officer
Compliance Officer conducting second-line KYC and name-screening reviews for Mashreq’s Egypt-based banking operations. Identifying compliance risks, supporting regulatory alignment, and advising internal stakeholders.
Team Lead – Compliance Monitoring, Assurance & Testing
Binance ADGM compliance leader designing risk-based monitoring and testing. Assuring AML/CFT, market conduct, client-asset, and prudential controls meet FSRA requirements.
Compliance Coordinator
Compliance Coordinator managing healthcare professional compliance files for Trio Workforce Solutions, a healthcare workforce-management company. Ensuring regulatory readiness, timely onboarding, and audit accuracy across clients.
Senior Director, Regulatory Affairs
Senior Regulatory Affairs leader guiding Pulmovant’s mosliciguat, an inhaled pulmonary hypertension therapy, through global clinical development and approval. Shaping FDA and international submission strategy.
PCI Compliance Specialist, French
PCI Compliance Specialist supporting US customers across phone, chat, email, and tickets. Guiding merchants through PCI-DSS compliance while troubleshooting VikingCloud’s cybersecurity platform.
Risk and Compliance Analyst
Risk & Compliance Analyst supporting PingWind’s federal government cybersecurity services. Conducting risk assessments, audits, compliance reviews, and continuous monitoring.
Compliance, International Investigations Associate
Senior investigator leading complex crypto AML/CFT investigations for Coinbase, a cryptocurrency and financial platform. Developing SAR/STR decisions, intelligence, and controls across jurisdictions.
Team Lead – Customer Compliance
Team Lead overseeing KYC, verification, and screening for eCarsTrade, a European B2B used-car auction platform. Improving compliance processes, coaching the team, and advancing automation.