Hybrid Director of Technology GRC & Compliance

Archer; San Jose (CA); Hybrid; USD 219,000 - 290,000; Full time

Job summary

Archer in San Jose, CA seeks a Director of Technology - Governance, Risk, and Compliance to design and lead Archer's cybersecurity GRC program. You will oversee SSPs, POA&Ms, risk management, audit readiness, and regulatory compliance (NIST SP 800-171, CMMC Level 2, SOX, ITAR/EAR), partnering with security, legal, finance, and operations.

This is a hybrid role reporting to the CIO, with emphasis on strategy and hands‑on delivery, enabling Archer to pursue federal contracts and uphold public

Qualifications

• Experience designing and implementing enterprise GRC programs.
• Ability to translate regulatory requirements into practical controls and audits.
• Strong leadership for cross-functional teams including security, legal, finance, and operations.

Responsibilities

• Develop and execute a comprehensive GRC strategy aligned with business objectives and regulatory obligations (NIST SP 800-171, CMMC Level 2, SOX 404, ITAR/EAR).
• Lead SSP/POA&Ms design and implementation to achieve compliance.
• Establish enterprise-wide risk management and reporting to the board and executives.
• Design and enforce a control framework (ISO 27001, NIST CSF, SOC 2 Type II).
• Coordinate audits, remediation plans, and evidence collection with auditors and regulators.
• Drive third‑party risk management and vendor security assessments.
• Provide executive reporting to the Board and Audit Committee.

Skills

NIST CSF

NIST 800-171

CMMC Level 2

SOX ITGC

ITAR/EAR

GRC leadership

Education

Advanced degree

Tools

Archer GRC

Audit Board

ServiceNow

Job description

Archer in San Jose, CA seeks a Director of Technology - Governance, Risk, and Compliance to design and lead Archer's cybersecurity GRC program. You will oversee SSPs, POA&Ms, risk management, audit readiness, and regulatory compliance (NIST SP 800-171, CMMC Level 2, SOX, ITAR/EAR), partnering with security, legal, finance, and operations.

This is a hybrid role reporting to the CIO, with emphasis on strategy and hands‑on delivery, enabling Archer to pursue federal contracts and uphold public