Remote Senior GRC & Security Compliance Lead

Lexipol; United States; A distancia; USD 105.000 - 115.000; Jornada completa

Descripción de la vacante

Lexipol is seeking a Senior GRC Analyst to own the security audit program end-to-end from SOC 2 and CJIS to GovRAMP readiness. The role is remote for candidates in the United States who can obtain CJIS access. You will partner with Engineering, IT, and Product to map controls across CJIS, SOC 2, GovRAMP, and NIST 800-53 Rev.

5 (Moderate). This is a high-visibility position reporting to the VP, Internal Technology.

Formación

• Minimum 5+ years in information security compliance, IT audit, or GRC.
• Experience running or supporting formal audits.
• Working knowledge of CJIS, GovRAMP, SOC 2, and NIST 800-53 Rev. 5.
• Ability to lead audits end-to-end and manage auditor relationships.
• Strong communication and cross-functional collaboration.

Responsabilidades

• Own end-to-end SOC 2 and CJIS audits and GovRAMP readiness.
• Design and maintain a unified control framework mapping to CJIS, GovRAMP, SOC 2, and NIST.
• Lead evidence collection, testing, and remediation with engineering and IT teams.
• Provide audit status reports to leadership.
• Advise product, DevOps, and security teams on controls.

Conocimientos

GRC expertise

Audit management

NIST 800-53 Rev.5

GovRAMP familiarity

CJIS knowledge

SOC 2 / CJIS

Security controls

Educación

CISA

CISSP

CRISC

CCSK

ISO 27001 Lead Auditor

CJIS compliance experience

Descripción del empleo

Lexipol is seeking a Senior GRC Analyst to own the security audit program end-to-end from SOC 2 and CJIS to GovRAMP readiness. The role is remote for candidates in the United States who can obtain CJIS access. You will partner with Engineering, IT, and Product to map controls across CJIS, SOC 2, GovRAMP, and NIST 800-53 Rev.

5 (Moderate). This is a high-visibility position reporting to the VP, Internal Technology.