Remote Senior Compliance Lead — CMMC/NIST/GDPR, Audits

Mechanical Orchard, Inc.; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Mechanical Orchard is seeking a senior GRC leader for a fully remote, full-time role focused on advancing our compliance program. You will own audit readiness, manage external audits, and serve as a DPO, helping our customers with due diligence for federal opportunities.

We value integrity, practical solutions, and kindness while delivering secure, compliant software services to clients and partners.

Qualifications

• 5+ years of GRC, information security compliance, or audit experience with direct ownership of compliance programs.
• Proven experience obtaining and maintaining ATOs, plus strong knowledge of CMMC, NIST SP 800-171, RMF, and STIGs.
• Hands-on Vanta or comparable GRC platform experience, and expertise with GDPR and CPRA.

Responsibilities

• This is a fully remote, full-time position focused on taking the compliance portfolio to the next level.
• The role involves leading external audits, serving as DPO, and supporting customer due diligence for federal opportunities.
• Mechanical Orchard values doing the right thing, doing what works, and being kind.

Skills

GRC management

Audit leadership

Regulatory knowledge

DPO liaison

Tools

Vanta

Job description

Mechanical Orchard is seeking a senior GRC leader for a fully remote, full-time role focused on advancing our compliance program. You will own audit readiness, manage external audits, and serve as a DPO, helping our customers with due diligence for federal opportunities.

We value integrity, practical solutions, and kindness while delivering secure, compliant software services to clients and partners.