Senior GRC & AI Governance Architect

Trace3; Dallas (TX); Remote; USD 135,000 - 163,000; Full time

Benefits offered by this job

Comprehensive medical, dental and eye

401(k) retirement plan with match

Training and development

Generous PTO

Job summary

Trace3 is seeking a senior GRC Architect to lead end-to-end governance, risk, and compliance engagements for diverse clients. You will drive security program assessments, risk analyses, and roadmaps, collaborating with CISOs and control owners from kickoff to executive readouts.

You will help establish AI governance programs, align with frameworks like NIST AI RMF and EU AI Act, and ensure high-quality, on-time deliverables while maintaining strong client relationships.

Qualifications

• Bachelor’s degree in Information Systems, Cybersecurity, or a related field, or equivalent professional experience.
• Minimum of 8 years’ experience in information security, IT risk, or IT audit, including at least 5 years delivering GRC consulting or assessment engagements.
• CISSP, CISA, CISM, CRISC, or equivalent security or risk certification strongly desired.
• Experience leading NIST CSF assessments from planning through maturity scoring and executive readout.
• Extensive knowledge of security and risk management frameworks (NIST CSF, NIST SP 800-53, ISO 27001, ISO 27005, NIST RMF).
• Experience with PCI DSS, SOC 2, HIPAA, GDPR regulatory requirements.

Responsibilities

• Lead and execute GRC engagements end-to-end, including kickoff, interviewing stakeholders, documentation review, analysis, deliverable development, and executive readouts.
• Perform security program maturity assessments against CSF 2.0 and related standards.
• Conduct gap and readiness assessments against regulatory requirements (PCI DSS, HIPAA, SOC 2, GDPR).
• Perform IT and cyber risk assessments and develop risk registers and treatment plans.
• Develop and deliver BIAs, RTO/RPO/MTD objectives, and inform business continuity planning.
• Translate requirements into tailored control environments, governance models, policies, and standards.
• Develop and quality-review deliverables and manage day-to-day engagement execution.
• Mentor consultants and contribute to delivery methodologies.

Skills

GRC consulting

NIST CSF assessments

Regulatory compliance

Executive readouts

Stakeholder interviews

Security frameworks

Education

Bachelor’s degree in Information Systems / Cybersecurity

Tools

GRC platforms (ServiceNow IRM, Archer, OneTrust)

Job description

Trace3 is seeking a senior GRC Architect to lead end-to-end governance, risk, and compliance engagements for diverse clients. You will drive security program assessments, risk analyses, and roadmaps, collaborating with CISOs and control owners from kickoff to executive readouts.

You will help establish AI governance programs, align with frameworks like NIST AI RMF and EU AI Act, and ensure high-quality, on-time deliverables while maintaining strong client relationships.