GRC Architect: Cybersecurity Risk & Controls Leader

Chaos Industries; El Segundo (CA); On-site; USD 120,000 - 165,000; Full time

Benefits offered by this job

Generous stock option grants

Relocation assistance

Annual bonuses (coming soon)

Free daily lunch

Job summary

CHAOS Industries seeks a senior GRC leader to own and mature its cybersecurity governance, risk, and compliance program. You will establish policies, standards, and accountability across IT, Cybersecurity, Physical Security, and Manufacturing, translating broad requirements into actionable controls.

You will design a unified control framework with security-by-design principles and defined MTD/RPO/RTO for critical systems, while coordinating audits and stakeholder reporting to drive security

Qualifications

• 5+ years hands-on GRC or compliance experience, including DoD environment or military service.
• Familiarity with NIST CSF, NIST RMF, ISO/IEC 27000 series, UK Cyber Essentials, CMMC/NIST 800-171, NIST 800-53.
• Experience supporting third-party audits from evidence collection through closure.
• Experience designing controls tailored to an organization, not generic templates.
• Experience building risk registers, control frameworks, or compliance programs.
• Experience writing policy documentation for non-security audiences.
• Must have experience managing teams.

Responsibilities

• Own and mature CHAOS Industries cybersecurity GRC program with governance, policies, standards, and accountability across CHAOS businesses.
• Translate broad requirements into controls adopted by teams across IT, Cybersecurity, Physical Security, and Manufacturing.
• Build and manage cybersecurity risk processes: risk registers, findings, remediation plans, ownership, escalation, and business acceptance.
• Design a unified control framework with security-by-design for systems, including MTD, RPO, and RTO definitions.
• Write and maintain policies beyond minimum compliance to raise security maturity.
• Manage GRC tooling and workflows to support risk assessments, control monitoring, and reporting.
• Coordinate third-party and certification audits, including evidence collection and auditor liaison.
• Collaborate across Legal, Compliance, and business leaders to drive security requirements to execution.
• Report risk posture and audit status to Program Director and executives.
• Support audits in cloud environments and across company sites.

Skills

GRC governance

Policy writing

Audit coordination

Risk assessment

NIST RMF/CSF

DoD/military experience

Education

Bachelor’s degree or equivalent in CS/cybersecurity

Tools

GRC tooling

Job description

CHAOS Industries seeks a senior GRC leader to own and mature its cybersecurity governance, risk, and compliance program. You will establish policies, standards, and accountability across IT, Cybersecurity, Physical Security, and Manufacturing, translating broad requirements into actionable controls.

You will design a unified control framework with security-by-design principles and defined MTD/RPO/RTO for critical systems, while coordinating audits and stakeholder reporting to drive security