Senior Security GRC Architect

rescale.com; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Rescale is seeking a Principal Security GRC Analyst to own complex compliance programs across FedRAMP, DoD IL5, SOC 2 Type 2, ISO 27001, and other frameworks for its cloud-based HPC platform. The role requires deep domain expertise, auditable control design, and close collaboration with security, IT, product, and engineering teams.

You will drive cross-framework harmonization, engage with auditors and government officials, and spearhead projects spanning months to years while balancing security,

Qualifications

• 8+ years experience with multiple compliance frameworks and audits.
• Expertise in at least one framework such as SOC 2 Type II, ISO 27001, FedRAMP, or NIST SP 800 series.
• US Citizenship is a requirement.

Responsibilities

• Own and mature the security governance, risk, and compliance program under the Director of Compliance.
• Engage with auditors and government officials across multiple frameworks (NIST, FedRAMP, SOC 2, ISO 27001, etc.).
• Lead large, multi-month to multi-year compliance projects to ensure framework alignment.
• Collaborate with security, IT, engineering and product teams to translate requirements into practical controls.
• Represent the program in customer security questionnaires and due-diligence reviews.
• Draft and improve security, privacy, and compliance policies and procedures.
• Create and manage automated processes to disseminate security and privacy knowledge.

Skills

Security governance

Audits & compliance

Risk assessment

FedRAMP

ISO 27001

NIST SP 800 series

GDPR/ITAR awareness

Job description

Rescale is seeking a Principal Security GRC Analyst to own complex compliance programs across FedRAMP, DoD IL5, SOC 2 Type 2, ISO 27001, and other frameworks for its cloud-based HPC platform. The role requires deep domain expertise, auditable control design, and close collaboration with security, IT, product, and engineering teams.

You will drive cross-framework harmonization, engage with auditors and government officials, and spearhead projects spanning months to years while balancing security,