GRC Lead, Cloud Security & Compliance

United States Digital Space LLC; San Mateo (CA); On-site; USD 200,000 - 250,000; Full time

Benefits offered by this job

Healthcare coverage

Vision & dental coverage

HSA & FSA

Mental health support

Parental leave & fertility benefits

Paid time off & holidays

Professional development stipend

Wellness benefits

Daily healthy lunches

Commuter benefits

Job summary

United States Digital Space LLC is seeking a GRCA leader to build and run the company’s governance, risk, and compliance program within the Security team. You will manage risk, scale compliance, and provide customers with clear information about security practices.

You will develop automated programs, drive policy, and collaborate with Security, IT, Legal, and Engineering to meet regulatory requirements as the company expands globally. This role is onsite.

Qualifications

• Strong written and spoken communication tailored to security topics.
• Demonstrated ability to lead security/compliance programs across teams.
• Experience in audits, risk management and regulatory controls for cloud apps.

Responsibilities

• Lead GRCA within Security, manage risks, scale compliance programs.
• Coordinate with Security, IT, Engineering, Product and Legal on controls.
• Develop tooling for testing and monitoring of controls across AWS, GitHub, etc.
• Maintain roadmap for security compliance in Corporate, IT and Product.
• Create and maintain company-wide security policies and training materials.
• Report progress and issue resolutions to management and stakeholders.
• Document procedures and oversee corrective action plans for issues.
• Perform annual security risk assessments and risk treatment planning.
• Conduct vendor security assessments and manage third-party risk.
• Oversee Security Exception Process and automate evidence collection.
• Support BIA, and annual BCP/DR activities; align with audits.
• Leverage AI/automation to scale GRCA functions; collaborate with auditors.
• Onsite work five days per week.

Skills

Security/compliance leadership

Audits and risk management

Cross-functional collaboration

Cloud experience (AWS)

Scripting (Python/JSON)

Policy and governance

SOC 2 / ISO27001 expertise

Security/IT compliance experience

Job description

United States Digital Space LLC is seeking a GRCA leader to build and run the company’s governance, risk, and compliance program within the Security team. You will manage risk, scale compliance, and provide customers with clear information about security practices.

You will develop automated programs, drive policy, and collaborate with Security, IT, Legal, and Engineering to meet regulatory requirements as the company expands globally. This role is onsite.