Program Architect - Governance, Risk, and Compliance

📋 Description

• Own design and implementation of Onebrief's GRC framework (RMF, FedRAMP, CMMC, SOC 2).
• Build and manage the control environment: policies, procedures, and evidence.
• Design and implement security controls with Product, Eng, Infra, IT (IAM, encryption).
• Collaborate with Engineering and IT to turn requirements into working controls.

🎯 Requirements

• 5+ years in GRC, security engineering, or a combined compliance/technical security role.
• Direct experience with RMF, FedRAMP, CMMC, or equivalent.
• Hands-on security controls: IAM, logging/monitoring, encryption.
• Knowledge of NIST 800-53 and/or NIST 800-171.
• Experience managing third-party audits and assessor relationships.
• Strong written comms translating regulatory language into guidance.

🎁 Benefits

• Remote work options; distributed team.
• Work on defense and government projects.