[Hiring] Senior Cyber Security Compliance & GRC Automation @V2X

Role Description

We are seeking a high-caliber GRC leader and systems architect to scale our enterprise cyber compliance engine with AI and automation. In this role, you will align our global infrastructure with strict defense mandates (CMMC, DFARS, ITAR/EAR) and enterprise standards (GDPR, SOX), driving automated evidence harvesting and continuous control testing across environments.

• Defense Framework Oversight: Direct enterprise CMMC 2.0 and NIST SP 800-171 compliance initiatives, overseeing automated System Security Plan (SSP) generation and POA&M remediation workflows.
• GRC Automation & Architecture: Engineer multi-tenant GRC platforms and custom API integrations to automate evidence harvesting, stream real-time telemetry, and eliminate manual audit prep.
• Global Regulatory & Export Control: Assess and enforce technical boundaries for ITAR/EAR export-controlled data, oversee GDPR data privacy governance, and maintain SOX IT General Controls (ITGC) across database and IAM clusters.
• Audit Leadership & DIB Readiness: Act as primary SME and audit liaison for DCSA, C3PAO, and customer assessments across network perimeters, VPNs, and SIEM platforms. May require travel for on-site assessments.
• Technical & Tactical Security: Oversee secure communications and network operations, enforcing strict compliance across active zone systems and legacy environments.
• Team & Practice Leadership: Mentor a high-performing team of information security and GRC engineers.

Qualifications

• Education: Master of Science in Information Assurance (MSIA) and/or Master of Business Administration (MBA) or an equivalent combination of education and experience from which comparable knowledge and job skills can be obtained. (One year related experience may be substituted for one year of education, if degree is required)
• Experience: 10+ years leading IT audit programs, GRC advisory practices, and security engineering operations
• Engineering Acumen: Hands-on experience building GRC software, designing compliance automation platforms, and auditing core network/database infrastructure leveraging AI.
• Defense Industry Domain Expertise: Deep operational knowledge of NISPOM, NIST, RMF standards, DFARS regulations, tactical defense infrastructure, and DIB audit readiness
• Certifications: At least one of the following certifications: Lead Certified CMMC Assessor (LCCA), CISSP, CISA, ISO 27001, or SCF Assessor.
• Skills: Analytical Thinking & Problem Solving, Business Acumen, Collaboration and Teamwork/Influence
• Other Requirements: U.S. Citizenship

Benefits

• Healthcare coverage
• Retirement plan
• Life insurance, AD&D, and disability benefits
• Wellness programs
• Paid time off, including holidays
• Learning and Development resources
• Employee assistance resources