GRC & AI Governance Architect: Lead Risk & Compliance

Trace3; Oregon; Hybrid; USD 135,000 - 163,000; Full time

Benefits offered by this job

Comprehensive medical, dental and visa

401(k) with employer match

Training and development programs

Collaborative culture

Job summary

Trace3 is seeking a senior Architect, Governance, Risk & Compliance (GRC) to lead and deliver GRC engagements for diverse clients. You will conduct framework-based assessments, translate findings into prioritized roadmaps, and work directly with CISOs and risk leaders to improve governance, AI governance, and control environments.

The role emphasizes engagement quality, on-time delivery, and client satisfaction in a delivery-focused setting. Travel may be required.

Qualifications

• Bachelor’s degree in Information Systems, Cybersecurity, or related field, or equivalent professional experience.
• Minimum of 8 years in information security, IT risk, or IT audit with at least 5 years in GRC consulting or assessments.
• Certifications such as CISSP, CISA, CISM, CRISC strongly desired.

Responsibilities

• Lead and execute GRC engagements end-to-end, including kickoff, stakeholder interviews, documentation, evidence review, analysis, and executive readouts.
• Perform security program maturity assessments against CSF 2.0 and related frameworks.
• Conduct gap and readiness assessments against PCI DSS, HIPAA, SOC 2, GDPR and other regs.
• Develop risk registers and risk treatment plans aligned to NIST SP 800-30 and ISO 27005.
• Translate findings into practical roadmaps, governance models, and measurable objectives.

Skills

Excellent communication

Client engagement

Leadership

Education

Bachelor’s degree in Information Systems or Cybersecurity or related field

Equivalent professional experience

Tools

GRC platforms (ServiceNow IRM, Archer, OneTrust)

Job description

Trace3 is seeking a senior Architect, Governance, Risk & Compliance (GRC) to lead and deliver GRC engagements for diverse clients. You will conduct framework-based assessments, translate findings into prioritized roadmaps, and work directly with CISOs and risk leaders to improve governance, AI governance, and control environments.

The role emphasizes engagement quality, on-time delivery, and client satisfaction in a delivery-focused setting. Travel may be required.