GRC Program Architect (Fully Remote)

Onebrief; Deutschland; Remote; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Onebrief, a defense-focused collaboration and AI-powered workflow software provider founded in 2019, seeks a senior GRC and security engineering leader in Germany.

You will own the architecture of compliance posture across RMF, FedRAMP, CMMC, SOC 2 and international frameworks, and integrate compliance with product and infrastructure teams.

This role builds policy, controls, and evidence systems to protect data and support government customers.

Qualifikationen

• 5+ years in GRC or security engineering roles.
• Direct experience with RMF, FedRAMP, CMMC or equivalent.
• Hands-on with technical security controls (IAM, logging, encryption).

Aufgaben

• Own the design and implementation of Onebrief's GRC framework across RMF, FedRAMP, CMMC, SOC 2.
• Build and manage the control environment, including policies, procedures, and evidence collection systems.
• Design and implement technical security controls in partnership with Product, Engineering, Infrastructure and Corporate IT.

Kenntnisse

GRC framework design

Security architecture

IAM & monitoring

Federal compliance

Cross-functional collaboration

Jobbeschreibung

• Onebrief sells to defense and government customers requiring proof of data protection.
• This role owns the architecture behind our compliance posture across FedRAMP, CMMC, SOC 2, and international frameworks.
• Compliance and security engineering must be integrated to implement technical controls.

WHAT YOU’LL DO:

• Own the design and implementation of Onebrief's GRC framework across RMF, FedRAMP, CMMC, SOC 2, and other applicable standards.
• Build and manage the control environment, including policies, procedures, and evidence collection systems.
• Design and implement technical security controls in partnership with Product, Engineering, Infrastructure and Corporate IT.

MINIMUM QUALIFICATIONS:

• 5+ years of experience in GRC, security engineering, or a combined compliance and technical security role.
• Direct experience with RMF, FedRAMP, CMMC, or equivalent federal compliance frameworks.
• Hands-on experience implementing technical security controls, such as IAM, logging and monitoring, network segmentation, or encryption.

Onebrief builds collaboration and AI-powered workflow software for military planning and operational coordination. Founded in 2019 and valued at over $2 billion, the company is a distributed team of builders from military, operational, and technology backgrounds.