Director of Governance, Risk & Compliance

🕒 Outubro 1

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🔴 Especialista

🚔 Conformidade

👻 Score fantasma 17%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Atmosera

SiteLinkedInTodas as Vagas

51 - 200 funcionários

☁️ SaaS

🔒 Cibersegurança

Cloud Computing • SaaS • Cybersecurity

A Atmosera é uma provedora líder de serviços de transformação especializada em soluções Microsoft Azure. Eles capacitam organizações a adotar, proteger e otimizar seus ambientes Azure, oferecendo serviços gerenciados, segurança na nuvem e treinamento técnico. Com foco em tecnologia moderna e expertise humana, a Atmosera oferece serviços em migração para Azure, desenvolvimento de aplicativos, DevOps, modernização de dados e segurança. Eles foram reconhecidos por sua excelência com o nível mais alto de Certificação Microsoft, garantindo serviço de alta qualidade e satisfação do cliente.

Descrição

• Lead Atmosera's internal GRC program and Managed Governance, Risk & Compliance services • Establish standardized GRC methodologies, processes, templates, evidence requirements, and quality controls • Lead risk assessments, control assessments, compliance readiness, policy governance, Managed Audit, Managed Questionnaires, and other GRC engagements • Manage client commitments, priorities, capacity, deliverable quality, and service performance • Identify opportunities for automation and AI to improve GRC delivery and scalability • Partner with Sales and Client Success on service scoping, SOWs, pricing, and complex opportunities • Lead and maintain System Security Plans for federal clients • Develop and review control implementation statements and supporting evidence • Coordinate with technical control owners to validate control implementation • Manage POA&Ms, control deficiencies, remediation activities, milestones, and dependencies • Coordinate responses to government, assessor, and auditor findings and requests • Facilitate SSP and control working sessions with clients, engineers, security teams, and stakeholders • Support continuous monitoring, security assessments, and authorization activities • Maintain alignment between documented controls and the actual operating environment • Support requirements involving NIST SP 800-53, NIST SP 800-171, FISMA, CMMC, FedRAMP concepts, and agency-specific requirements • Lead cybersecurity risk assessments, control gap assessments, risk registers, treatment plans, exceptions, and remediation tracking • Support SOC 2, NIST, CIS, ISO 27001, PCI DSS, HIPAA, CMMC, and Microsoft security benchmark frameworks • Own Managed Audit methodology, including audit readiness, evidence management, auditor coordination, findings, and remediation • Oversee Managed Security Questionnaire delivery and reusable response and evidence libraries • Ensure policies, standards, procedures, and control documentation reflect operational practices • Partner with the CISO to operate and mature Atmosera's internal security and compliance program • Serve as a senior GRC advisor to client security, IT, risk, compliance, and executive leadership • Translate regulatory and compliance requirements into actionable security improvements • Partner with Security Operations, Managed Azure, Microsoft 365, and engineering teams to map control requirements to technical implementations • Maintain working knowledge of Azure, Entra ID, Defender, Sentinel, Intune, Purview, and Azure Policy • Support vCISO engagements requiring governance, risk, audit, or compliance expertise • Lead, mentor, and develop GRC Analysts and Consultants • Manage workload, capacity, priorities, quality assurance, and escalations • Build repeatable processes that allow the GRC practice to scale • Complete onboarding, shadow active engagements, and audit current MGRC workflows within 90 days • Independently own the GRC function, manage the SOC 2 Type 2 program, lead MGRC delivery, and manage complex federal SSP activities within one year

🎯 Requisitos

• 8+ years of cybersecurity, GRC, security assessment, audit, or related experience • Demonstrated experience leading GRC programs or teams • Hands-on experience with NIST SP 800-53, System Security Plans, POA&Ms, control implementation statements, and federal security requirements • Experience managing audits, evidence, risk assessments, control gaps, policies, and remediation programs • Ability to translate regulatory requirements into technical and operational security controls • Strong client-facing, executive communication, and technical stakeholder management skills • Experience in an MSSP, MSP, consulting, professional services, federal program, or government contractor environment (preferred) • Microsoft Azure and Microsoft 365 security experience (preferred) • CISSP, CISM, CRISC, CISA, CGEIT, or similar certifications (preferred)

🏖️ Benefícios

• Competitive salaries commensurate with experience and skills • 100% company match on 401(k) contributions up to 4% of salary • Performance-based compensation with bonus potential in addition to base salary • 100% employer-paid health, vision, and dental insurance for employees • Company-paid life, AD&D, short-term disability, and long-term disability insurance • Three weeks of paid time off • 11 paid holidays • Paid community service leave • Employee recognition and reward program • Ability to work from home or from a local US office