[Hiring] Principal Security GRC Analyst @Rescale

Role Description

Rescale's Compliance team is responsible for automating, maintaining and maturing a multi-framework compliance program spanning FedRAMP Moderate, DoD IL5, CMMC Level 2, SOC 2 Type 2, ISO 27001:2022, TISAX AL2, and Facility Clearance License (FCL) requirements. As a Principal Security GRC Analyst, you will serve as a senior individual contributor driving control implementation, audit readiness, and cross-framework harmonization across Rescale's cloud-based HPC and simulation platform.

This is a high-autonomy, high-impact role for someone who wants to own complex compliance problems end-to-end from control design through evidence collection to auditor engagement.

At Rescale, this means you will work on and impact:

• Work under the guidance of our Director of Compliance to continue to mature a comprehensive security governance, risk, and compliance program.
• Work directly with auditors and government officials across various security and compliance frameworks such as the NIST SP 800 series, FedRAMP, SOC 2, ISO 27001, Cyber Essentials, CSA and others.
• Lean into AI to enable our products to comply with new and existing frameworks.
• Own and drive large projects that span multiple months, quarters and even years to ensure that Rescale is compliant with the frameworks chosen.
• Interact directly with our security team, IT team and other teams to gather evidence for audits.
• Partner with engineering, product, platform, and other teams to translate compliance requirements into practical, implementable controls to balance security, compliance, and privacy concerns without sacrificing innovation.
• Represent the compliance program in customer-facing discussions, security questionnaires and due diligence reviews.
• Help draft policies and procedures that improve compliance and privacy at Rescale.
• Create, implement and manage automated processes to improve the dissemination of policies, procedures, plans, and knowledge about security, compliance, and privacy.
• Work within a team that supports you and wants you to succeed - every single day.
• Be flexible and willing to expand your scope of responsibilities as the team continues to evolve.

Qualifications

• At least 8+ years experience with multiple compliance frameworks and audits both small and large, including adapting to changes and managing complex implementation projects.
• Deep expertise in at least one security framework such as SOC2 Type II, ISO 27001, FedRAMP, or NIST SP 800 series.
• Exposure to other frameworks and regulations including GDPR, ITAR, EAR, NISPOM, CMMC, etc. is a plus.
• Certifications such as CISM, GSLC, Security +CE, CISSP etc. are pluses.
• Due to the nature of the work, US Citizenship is a requirement.

Benefits

• Rescale is an equal opportunities employer and welcomes applications from all qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation or age.
• Employment with Rescale will be contingent upon successful completion of a comprehensive background check.