GRC Program Lead: AI-Driven Compliance & Security

United States Digital Space LLC

United States

Remote

USD 139,000 - 168,000

Full time

8 days ago

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Benefits offered by this job

Remote-first culture

Open-source mindset

AI-enabled tooling exposure

Job summary

the company is the leading collaborative workflow platform for defense, intelligence, security, and critical infrastructure. Trusted by the U.S.

Department of War and Fortune 500s, our platform runs on-premises and in private clouds, delivering secure messaging, file sharing, workflow automation, audio/screenshare, and project management—all with full data and operational control. the company is hiring a GRC Manager to own and modernize our governance, risk, and compliance program across federal

Qualifications

Bachelor's degree in computer science, information security, or related field — or significant professional GRC and compliance experience
Proven senior-level experience in governance, risk, and compliance, security compliance, or IT audit, including direct ownership of a certification or authorization program
Experience with U.S. Federal standards including CMMC and NIST series (800-171 / 800-53)
Experience with ISO 27001 and SOC 2 Type II
Experience operating a formal risk management program
Experience running a third-party and vendor risk management program
Experience owning customer-facing security assurance, including security questionnaires and trust center content
Working knowledge of security controls for cloud environments (AWS, GCP, and/or Azure)
Excellent written and verbal communication skills

Responsibilities

Own and modernize the company's compliance programs across federal and commercial markets
Lead readiness, certification, and surveillance cycles across both programs
Operate the risk management program end to end — from identification and assessment through treatment and acceptance
Own the third-party and vendor risk management program, including security assessments and supply chain risk
Apply GRC engineering and automation to replace manual evidence collection with continuous controls monitoring
Build AI-native workflows to accelerate and improve the quality of recurring compliance work
Maintain the control library, system security plans, POA&Ms, and policies
Coordinate external audits from scoping through remediation
Accelerate deal cycles by owning customer security questionnaires, trust center content, and reusable compliance artifacts
Grow and lead the GRC team as the program scales