Program Architect – Governance, Risk, and Compliance

🕒 3 days ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Onebrief

WebsiteLinkedInAll Job Openings

1 - 10 employees

🎖️ Defense

💼 Consulting

🏛️ Government

💰 $21M Venture Round on 2022-10

Defense • Consulting • Government

Onebrief is a platform that enhances and accelerates decision-making, planning, and collaboration, especially within large organizations and governmental bodies. The platform aims to streamline operations and reduce manual processes by offering real-time collaboration, data visualization, specialized workflows, and creative support tooling. Designed by senior planners, Onebrief serves as a hub for users to build plans and products efficiently, with the platform being noted for significantly improving productivity and adaptability. It is used across various networks, including SIPR and JWICS, and is regarded as a transformative tool for organizations such as the National Security Council and the US Army.

📋 Description

• Own the design and implementation of Onebrief's GRC framework across RMF, FedRAMP, CMMC, SOC 2, and other applicable standards. • Build and manage the control environment, including policies, procedures, and evidence collection systems. • Design and implement technical security controls in partnership with Product, Engineering, Infrastructure and Corporate IT including access management, logging, encryption, and vulnerability management practices. • Partner with Engineering, Infrastructure, and Corporate IT to translate compliance requirements into working technical controls, not just documented ones.

🎯 Requirements

• 5+ years of experience in GRC, security engineering, or a combined compliance and technical security role. • Direct experience with RMF, FedRAMP, CMMC, or equivalent federal compliance frameworks. • Hands-on experience implementing technical security controls, such as IAM, logging and monitoring, network segmentation, or encryption. • Working knowledge of security control frameworks such as NIST 800-53 or NIST 800-171. • Experience managing third-party audits and assessor relationships. • Strong written communication skills, with the ability to translate regulatory language into clear technical and internal guidance.

🏖️ Benefits

• Equity: Share in the company's success. • Flexible Work Environment: Remote-first organization with flexible work hours and unlimited PTO. • Comprehensive Health Coverage: Health, dental, vision, and life insurance. • Retirement Plan: 401(k) plan with company match to secure your future. • Parental Leave: 8 weeks at 100% regardless of state. • Company Retreats: Annual company summit trips. • Home Office Budget: $1,000 per year for home office improvements.