Senior Cyber GRC Engineer – CMMC/NIST Expert

Rippling, Inc.; Denver (CO); On-site; USD 135,000 - 169,000; Full time

Benefits offered by this job

Medical coverage

401(k) plan

Life insurance

EAP

Job summary

Performance Drone Works (PDW) is building a next-generation center of engineering excellence for tactical robotic systems. We seek a senior cybersecurity leader to define priorities, standards, and roadmaps across enterprise IT, engineering, and manufacturing, while ensuring readiness for CMMC, NIST SP 800-171, and ISO 27001.

You will own core GRC processes, support incident-response preparedness, and collaborate with internal stakeholders, auditors, customers, and vendors to drive remediation

Qualifications

• 7+ years of progressive cybersecurity experience with hands-on controls.
• Experience implementing or assessing security programs against CMMC/NIST SP 800-171.
• Knowledge of ISO 27001 controls and real-world ISMS.
• Experience in ITAR/export controls and defense data environments.
• Hands-on with EDR, IAM, SIEM, and cloud-security controls.

Responsibilities

• Define priorities, standards, and roadmaps for enterprise IT, engineering, manufacturing, and business systems security.
• Lead compliance readiness efforts for frameworks and customer requirements (CMMC, NIST 800-171, ISO 27001).
• Translate requirements into actionable controls and partner with system owners to implement them.
• Own and improve risk assessments, control assessments, SSPs, POA&Ms, evidence collection, audit readiness, and remediation tracking.
• Conduct hands-on cybersecurity operations (EDR, IAM, email security, logging, monitoring).
• Oversee vulnerability-management programs, scan cadence, remediation tracking, and evidence collection.
• Collaborate with IT and engineering to secure endpoints, cloud services, networks, and applications.
• Develop incident-response playbooks, investigations, and lessons learned.
• Create cybersecurity metrics and communicate risk trends to leadership.
• Engage with auditors, customers, assessors, and vendors to gather evidence and resolve findings.
• Build repeatable processes and documentation to scale security controls and protect sensitive data.

Skills

GRC programs

CMMC

NIST SP 800-171

ISO 27001

ITAR compliance

EDR

IAM

SIEM

Vulnerability management

Education

Bachelor's degree in Cybersecurity/IT/CS or equivalent

Equivalent professional experience or certifications

Tools

Tenable

Qualys

Rapid7

Jira

ServiceNow

Microsoft Defender

CrowdStrike

Azure security

Job description

Performance Drone Works (PDW) is building a next-generation center of engineering excellence for tactical robotic systems. We seek a senior cybersecurity leader to define priorities, standards, and roadmaps across enterprise IT, engineering, and manufacturing, while ensuring readiness for CMMC, NIST SP 800-171, and ISO 27001.

You will own core GRC processes, support incident-response preparedness, and collaborate with internal stakeholders, auditors, customers, and vendors to drive remediation