GRC Analyst — Security by Design for Defense

CHAOS Industries; El Segundo (CA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health benefits

401k with company match

Free daily lunch

No meeting Fridays

Unlimited PTO

Relocation assistance

Annual bonuses

Job summary

CHAOS Industries in Los Angeles focuses on cutting-edge defense tech and cybersecurity governance. We are seeking a senior GRC leader to own governance, risk, and compliance across IT, Cybersecurity, Physical Security, and Manufacturing.

You will design a unified control framework with security-by-design, lead audits, and coordinate with Legal and Compliance. Onsite 4 days/week, travel up to 25% for site validation.

Qualifications

• Bachelor's degree or equivalent in a related field.
• Hands-on experience with NIST, ISO/IEC 27000 series, and related frameworks.
• Experience selecting, implementing, or administering GRC tooling and workflows.
• Exposure to governance, risk, and compliance across security, privacy, and quality domains.
• Familiarity with OT/ICS security concepts.
• Minimum 5 years in GRC/compliance with DoD or military background.

Responsibilities

• Own risk assessments across multiple departments and maintain the centralized risk register.
• Design and maintain a unified control framework with security-by-design principles.
• Write policy and procedures beyond minimum compliance to mature security posture.
• Manage GRC tooling, workflows, and reporting.
• Coordinate third-party and certification audits, collecting evidence and liaising with auditors.
• Bridge requirements across departments to drive security and compliance initiatives.
• Report risk posture and program maturity to leadership; onsite presence 4 days/week.
• Travel up to 25% to support site validation activities.

Skills

GRC experience

DoD experience

Policy writing

Audit coordination

Education

Bachelor's degree

Tools

GRC tooling

Job description

CHAOS Industries in Los Angeles focuses on cutting-edge defense tech and cybersecurity governance. We are seeking a senior GRC leader to own governance, risk, and compliance across IT, Cybersecurity, Physical Security, and Manufacturing.

You will design a unified control framework with security-by-design, lead audits, and coordinate with Legal and Compliance. Onsite 4 days/week, travel up to 25% for site validation.