Principal Security GRC Analyst

The role

You will drive control implementation, audit readiness, and cross-framework harmonization for a cloud-based HPC and simulation platform. You will work under the Director of Compliance to mature a security governance, risk, and compliance program.

What you will do

• Mature a comprehensive security governance, risk, and compliance program.
• Work directly with auditors and government officials across various security and compliance frameworks.
• Lean into AI to enable products to comply with new and existing frameworks.
• Own and drive large projects to ensure compliance with chosen frameworks.
• Interact with security, IT, and other teams to gather evidence for audits.
• Partner with engineering, product, and platform teams to translate requirements into practical controls.
• Represent the compliance program in customer-facing discussions, security questionnaires, and due diligence reviews.
• Help draft policies and procedures that improve compliance and privacy.
• Create, implement and manage automated processes to improve dissemination of policies, procedures, plans, and knowledge.

Required qualifications

• At least 8+ years experience with multiple compliance frameworks and audits.
• Deep expertise in at least one security framework such as SOC2 Type II, ISO 27001, FedRAMP, or NIST SP 800 series.
• US Citizenship is a requirement.

Nice to have

• Exposure to other frameworks and regulations including GDPR, ITAR, EAR, NISPOM, CMMC, etc.
• Certifications such as CISM, GSLC, Security +CE, CISSP etc.
• Flexibility and willingness to expand your scope of responsibilities.

Before you apply

• US Citizenship is a requirement.
• Employment is contingent upon successful completion of a comprehensive background check.

About the company

Rescale is a leader in digital engineering that is transforming how products are developed through intelligent automation, applied AI, and data management. The company is building the next wave of breakthroughs in industries like aerospace, energy, life sciences, and manufacturing.