Risk Compliance Officer

Hidonix Industries; Santa Monica (CA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Flexible PTO

Job summary

A technology firm based in Santa Monica seeks a Compliance & Risk Officer responsible for managing enterprise risk, ensuring compliance with regulatory standards such as CMMC and ISO 27001, and overseeing internal controls. The ideal candidate should have over 5 years of experience in risk management or compliance with relevant certifications preferred. The role requires on-site presence and US citizenship or valid green card. Competitive benefits, including flexible PTO, are offered.

Qualifications

• 5+ years in risk management, compliance, or audit.
• Experience with CMMC Level 2 and/or ISO 27001.
• Familiarity with NIST 800-171 / 800-53.
• Strong documentation and audit experience.
• CRISC, CISA, ISO Lead Auditor, or similar preferred.

Responsibilities

• Conduct annual and quarterly risk assessments.
• Maintain control mappings and documentation.
• Develop and maintain policies and procedures.
• Track corrective action plans.
• Validate security control effectiveness.

Skills

Risk management

Compliance oversight

Audit experience

Documentation skills

Job description

Reports To:

COO or CEO (preferred for independence)

Works Closely With:

CISO, Legal, HR, IT

PTO:

Flexible

Position Summary

The Compliance & Risk Officer is responsible for enterprise risk management, regulatory compliance oversight, and internal control validation. This role ensures adherence to CMMC, ISO 27001, NIST 800-171, and other regulatory frameworks, while maintaining independence from operational security functions.

Key Responsibilities

Governance & Risk

• Conduct annual and quarterly risk assessments
• Present risk posture to executive leadership

Compliance Management

• Own CMMC/ISO 27001 certification lifecycle
• Maintain control mappings and documentation
• Conduct internal control testing
• Coordinate external audits and assessments
• Track corrective action plans

Policy & Documentation

• Develop and maintain policies and procedures
• Ensure documentation meets auditor standards
• Oversee third-party/vendor risk assessments

Oversight

• Validate security control effectiveness (not implement)
• Ensure separation of duties in security functions
• Identify compliance gaps and remediation plans

Qualifications

• 5+ years in risk management, compliance, or audit
• Experience with CMMC Level 2 and/or ISO 27001
• Familiarity with NIST 800-171 / 800-53
• Strong documentation and audit experience
• CRISC, CISA, ISO Lead Auditor, or similar preferred

Success Metrics

• Timely remediation of identified risks
• Accurate and current risk register
• Successful certification maintenance

Requirements

• Must be commuting distance of Santa Monica, CA.
• Must be comfortable workin on site.
• Must be a US Citizen or valid green card holder.