Senior GRC Architect: FedRAMP & Compliance Lead

Mimecast North America, Inc.; Columbus (OH); Hybrid; USD 132,000 - 198,000; Full time

Job summary

Mimecast North America, Inc. is seeking a Principal GCO High Compliance Systems Advisor to own the FedRAMP program, lead control documentation, and manage third-party risk.

You will partner with Engineering, Security, Legal, Product, and other SMEs to keep controls audit-ready across FedRAMP, ISO, SOC 2, and NIST, reporting to the SVP / Head of GCO. This hybrid role can be based in Columbus, Minneapolis, or Lexington.

Qualifications

• Proven FedRAMP authorization experience with Moderat e impact.
• Experience drafting technical control documentation with SMEs.
• Ability to lead cross-functional teams around a shared documentation position.
• Strong technical writing for audit-ready narratives.

Responsibilities

• Own end-to-end FedRAMP authorization activities, including control design and evidence collection.
• Chair mandatory FedRAMP meetings with 3PAOs, sponsors, and clients.
• Draft, review, and maintain SSPs, POA&Ms, and control narratives.
• Translate technical implementations into assessor-ready narratives with SMEs.
• Maintain control evidence libraries mapped to FedRAMP, ISO, SOC 2, and NIST.
• Report program risks, milestones, and blockers to leadership.
• Monitor emerging regimes and assess implications for the certification roadmap.

Skills

FedRAMP

Documentation

Cross-functional leadership

Regulatory compliance

GRC tooling

Education

Bachelor's degree in a relevant field

Tools

Drata

Responsive

Job description

Mimecast North America, Inc. is seeking a Principal GCO High Compliance Systems Advisor to own the FedRAMP program, lead control documentation, and manage third-party risk.

You will partner with Engineering, Security, Legal, Product, and other SMEs to keep controls audit-ready across FedRAMP, ISO, SOC 2, and NIST, reporting to the SVP / Head of GCO. This hybrid role can be based in Columbus, Minneapolis, or Lexington.