RRemoteville
Onebrief logoOnebrief

Senior Program Architect - Governance, Risk, and Compliance

Skills
BatteriesCloud SecurityEasily AdaptableIdentity And Access ManagementInformation SecurityRecruitingRisk Management Framework
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • 5+ years of experience in GRC security engineering or a combined compliance and technical security role
  • Direct experience with RMF FedRAMP CMMC or equivalent federal compliance frameworks
  • Hands-on experience implementing technical security controls such as IAM logging and monitoring network segmentation or encryption
  • Working knowledge of security control frameworks such as NIST 800-53 or NIST 800-171
  • Experience managing third-party audits and assessor relationships
  • Strong written communication skills with the ability to translate regulatory language into clear technical and internal guidance

Nice to have

  • Startup experience
  • Military background
  • Defense experience
  • Government contracting experience
  • CISSP
  • CISA
  • CRISC
  • AWS Solutions Architect
  • GRC automation

Day to day

  • Own the design and implementation of Onebrief's GRC framework across RMF FedRAMP CMMC SOC 2 and other applicable standards
  • Build and manage the control environment including policies procedures and evidence collection systems
  • Design and implement technical security controls with Product Engineering Infrastructure and Corporate IT including access management logging encryption and vulnerability management
  • Translate compliance requirements into working technical controls that are practical auditable and scalable