Job Description

OVERVIEW

Your impact
Lead Atmosera’s internal GRC program and its Managed GRC services for clients.
Deliverables include
- GRC program and MGRC service leadership: Lead internal GRC program and Managed GRC services; own methodologies, processes, templates, evidence, and quality; lead risk and control assessments, compliance readiness, policy governance, Managed Audit, Managed Questionnaires; manage client commitments, capacity, and quality; automation and AI for GRC delivery; partner with Sales and Client Success on scoping, SOWs, and pricing
- Federal compliance and SSP management: Lead and maintain System Security Plans for federal clients; control implementation statements and evidence; POA and Ms and remediation; responses to government and assessor findings; support NIST SP 800-53, 800-171, FISMA, CMMC, FedRAMP concepts
- Risk, compliance and audit management: Support SOC 2, NIST, CIS, ISO 27001, PCI DSS, HIPAA, CMMC, Microsoft security benchmarks
- Internal GRC: Partner with CISO on internal program (SOC 2 Type 2)
- Client advisory and technical alignment: Senior GRC advisor to clients; map controls to Azure, Entra ID, Defender, Sentinel, Intune, Purview, Azure Policy
- Team leadership: Lead and mentor GRC Analysts and Consultants
What success looks like
Effective GRC delivery, client satisfaction, audit readiness.
How we show up
Humble, Hungry, Mindful.
Our interview process
Multi-stage interview process.
Benefits
- Competitive salary plus bonus potential
- 401(k) 100% match up to 4%
- 100% employer-paid health, vision, dental for employees
- Company-paid life, AD and D, disability
- 3 weeks PTO; 11 paid holidays
- Community service leave
- Recognition program