Senior Compliance Specialist (Fully Remote)

Mechanical Orchard, Inc.; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Mechanical Orchard is seeking a senior GRC leader for a fully remote, full-time role focused on advancing our compliance program. You will own audit readiness, manage external audits, and serve as a DPO, helping our customers with due diligence for federal opportunities.

We value integrity, practical solutions, and kindness while delivering secure, compliant software services to clients and partners.

Qualifications

• 5+ years of GRC, information security compliance, or audit experience with direct ownership of compliance programs.
• Proven experience obtaining and maintaining ATOs, plus strong knowledge of CMMC, NIST SP 800-171, RMF, and STIGs.
• Hands-on Vanta or comparable GRC platform experience, and expertise with GDPR and CPRA.

Responsibilities

• This is a fully remote, full-time position focused on taking the compliance portfolio to the next level.
• The role involves leading external audits, serving as DPO, and supporting customer due diligence for federal opportunities.
• Mechanical Orchard values doing the right thing, doing what works, and being kind.

Skills

GRC management

Audit leadership

Regulatory knowledge

DPO liaison

Tools

Vanta

Job description

• Own and continuously improve ISO 27001, SOC 2, and GDPR compliance programs, including audit readiness and evidence collection.
• Lead CMMC certification, agency-specific ATOs, and federal/defense compliance efforts, including SSPs and POA&Ms.
• Drive enterprise risk management, vendor risk reviews, security awareness training, and compliance tooling optimization.

Qualifications and Skills:

• 5+ years of GRC, information security compliance, or audit experience with direct ownership of compliance programs.
• Proven experience obtaining and maintaining ATOs, plus strong knowledge of CMMC, NIST SP 800-171, RMF, and STIGs.
• Hands-on Vanta or comparable GRC platform experience, and expertise with GDPR and CPRA.

About the Role:

• This is a fully remote, full-time position focused on taking the compliance portfolio to the next level.
• The role involves leading external audits, serving as DPO, and supporting customer due diligence for federal opportunities.
• Mechanical Orchard values doing the right thing, doing what works, and being kind.

Mechanical Orchard

Mechanical Orchard specializes in safely rewriting the most critical and complex business applications to make them adaptable and resilient. The company is an experienced Agile software consultancy that values cross-functional teams, collective ownership, and continuous improvement, and is bringing joy to beleaguered IT teams.