Director of Governance, Risk and Compliance

Your impact Lead Atmosera’s internal GRC program and its Managed GRC services for clients. Deliverables include GRC program and MGRC service leadership: Lead internal GRC program and Managed GRC services; own methodologies, processes, templates, evidence, and quality; lead risk and control assessments, compliance readiness, policy governance, Managed Audit, Managed Questionnaires; manage client commitments, capacity, and quality; automation and AI for GRC delivery; partner with Sales and Client Success on scoping, SOWs, and pricing Federal compliance and SSP management: Lead and maintain System Security Plans for federal clients; control implementation statements and evidence; POA and Ms and remediation; responses to government and assessor findings; support NIST SP 800-53, 800-171, FISMA, CMMC, FedRAMP concepts Risk, compliance and audit management: Support SOC 2, NIST, CIS, ISO 27001, PCI DSS, HIPAA, CMMC, Microsoft security benchmarks Internal GRC: Partner with CISO on internal program (SOC 2 Type 2) Client advisory and technical alignment: Senior GRC advisor to clients; map controls to Azure, Entra ID, Defender, Sentinel, Intune, Purview, Azure Policy Team leadership: Lead and mentor GRC Analysts and Consultants What success looks like Effective GRC delivery, client satisfaction, audit readiness. How we show up Humble, Hungry, Mindful. Our interview process Multi-stage interview process. Benefits Competitive salary plus bonus potential 401(k) 100% match up to 4% 100% employer-paid health, vision, dental for employees Company-paid life, AD and D, disability 3 weeks PTO; 11 paid holidays Community service leave Recognition program