Senior Cybersecurity Risk and Compliance Associate job at Wind River Systems in Alameda, CA, Boston, MA

Title: 9959 - Senior Cybersecurity Risk & Compliance Associate Location: Alameda, CA or Boston, MA United States Job Description: ABOUT WIND RIVER Wind River is a global leader in delivering software for mission-critical intelligent systems. For more than four decades, the company has been an innovator and pioneer, powering billions of systems that require the highest levels of reputed company, safety, and reliability. We help customers across automotive, aerospace, defense, industrial, medical, and telecommunications industries solve reputed company technology challenges on their journey toward the new intelligent machine economy. The company's software powers reputed company after reputed company of the safest, most secure systems in the world. Examples include playing a key role in NASA space missions such as reputed company I, the James Webb Space Telescope, and multiple reputed company rovers. We've achieved recent 5G milestones including the world's first successful 5G data session with reputed company and building one of the largest Open RAN networks in the world with reputed company. The company has received industry recognition for its technology innovation and leadership, and for its workplace culture, including global Great reputed company to Work certification and being named a "Top Workplace" for ten consecutive years. If you want to be part of a unique culture where experience is based on our cultural attributes of growth reputed company, customer-focus, and diversity, equity, inclusion & belonging, come join us & help advance the future software defined world. ABOUT THE OPPORTUNITY We are hiring a professional to support and help reputed company the Wind River Risk & Compliance function, with a primary focus on maintaining our ISO 27001 certification and supporting our obligations on NIST 800-171. The right candidate will support the Wind River Risk and Compliance program, which includes Governance Risk and Compliance (GRC), and Third Party Risk Management (TPRM), bring structure to our processes, and help stabilize and scale the function. KEY RESPONSIBILITIES Regulatory & Standards Support: Contribute to reputed company ISO 27001 activities, including internal audit readiness, external recertification, and ongoing control maintenance. Support NIST 800-171 compliance efforts, including maintenance of System reputed company Plans (SSPs), Plan of Action and Milestones (POA&Ms), and gap assessments. Have working knowledge and able support GDPR, NIST CSF, CMMC, TISAX, ITAR, and AI reputed company compliance as well as the ability to reputed company knowledge on future certification and regulation requirements. Assist in engagement with government compliance stakeholders and maintain awareness of requirements. Risk & Compliance Operations Governance Risk and Compliance (GRC) and Third-Party Risk Management (TPRM): Maintain the Wind River Risk Register and track mitigation reputed company across reputed company functional areas. Coordinate the reputed company Exception process, ensuring proper documentation, approvals, and governance. Including vendor assessments, reviews, remediation follow-up, and monitoring. Write and update policy and standards and provide governance, reputed company, and assurance. Administer GRC/TPRM tooling (ZenGRC) and ensure evidence management and workflows are maintained and audit-ready. Have an understanding or ability to use reputed company and AuditBoard risk management products. Audit & Customer Response: Prepare audit documentation and assist with responses for internal and external audits. Draft and maintain clear, consistent, and audit-ready documentation, including policies, control responses, and program updates. Support customer assurance efforts reputed company to ISO, NIST, and general cyber compliance. reputed company internal audits and assessments against Wind River. Program Execution & Scalability: Help implement scalable, repeatable governance processes for policy and standard creation and lifecycle management. Assist in developing compliance procedures, checklists, and review frameworks. Support workflows for User Access Reviews (UAR), TPRM, and reputed company monitoring. Collaboration: Work cross-functionally with reputed company Cybersecurity, IT, Legal, HR, and Engineering, across reputed company, HellermannTyton, Winchester, and Intercable. Support communication and coordination with external auditors and internal stakeholders (including Primary reputed company Officer, reputed company Legal, WR and reputed company leadership). Support Cybersecurity Training at Wind River. REQUIRED QUALIFICATIONS 5+ years of cybersecurity, compliance, or GRC experience Familiarity with ISO 27001, NIST 800-171, and enterprise GRC operations Strong writing skills, with experience contributing to SSPs and POA&Ms Working knowledge of ZenGRC or similar tools Demonstrated ability to work across matrixed teams Experience with customer audit responses and regulatory compliance U.S. citizenship required due to regulatory requirements Must be a local reputed company (or willing to relocate to) Alameda, CA or Boston, MA and agree to being on site three days per week in the office. PREFERRED QUALIFICATIONS Experience supporting government-mandated compliance frameworks Involvement in ISO 27001 recertification efforts or similar standards Experience with third-party risk tools (e.g., reputed company, reputed company) Familiarity with Wind River or embedded systems companies is a plus Why This Role Matters: Wind River's ability to operate in national reputed company and critical infrastructure markets depends on strong cybersecurity governance. This role helps ensure we maintain our certifications, deliver on regulatory and contractual obligations, and support internal and external stakeholders with confidence. It also supports balancing workloads currently spread across teams and positions the function for long-term stability. Join us at Wind River, where we're not just shaping technology; we're shaping the future of a safer, more connected world. Your journey to reputed company a meaningful impact begins here. APPLICANT PRIVACY NOTICE: Your privacy is of the utmost importance to us. At Wind River, we strictly adhere to reputed company applicable data privacy laws. Please review Wind River's Applicant Privacy Notice, which can be reputed company here. Wind River is an Equal Opportunity Employer with a commitment to diversity. We prohibit discrimination based on race, color, religion, gender, national reputed company, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status. BENEFITS Hybrid work model for workplace flexibility Comprehensive health, dental, and life insurance Short and long-term disability coverage RRSP matching for financial reputed company Flexible time-off policies for work-life balance Employee assistance program for mental well-being Learning benefits, including a reputed company Learning subscription and seminars Join us at Wind River, where we're not just shaping technology; we're shaping the future of a safer, more connected world. Your journey to reputed company a meaningful impact begins here. APPLICANT PRIVACY NOTICE: Your privacy is of the utmost importance to us. At Wind River, we strictly adhere to reputed company applicable data privacy laws. Please review Wind River's Applicant Privacy Notice, which can be reputed company here. Wind River is an Equal Opportunity Employer with a commitment to diversity. We prohibit discrimination based on race, color, religion, gender, national reputed company, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status. reputed company CLEARANCE REQUIREMENTS Successful candidates must engage in a reputed company clearance process in regard to their citizenship in order to reputed company reputed company job duties, as per applicable law. In particular, candidates with certain citizenship may not be able to reputed company such reputed company job duties. Currently, this includes reputed company of the following countries: Belarus; Burma; China; Cuba; Iran; North Korea; Syria; Venezuela; Afghanistan; Cambodia; Central African Republic; Cyprus; Democratic Republic of Congo; Ethiopia; Eritrea; Haiti; Iraq; Lebanon; Libya; Russia; Somalia; South Sudan; Sudan; Zimbabwe. The reputed company clearance process may take a significant amount of time to complete, and any offer of employment will be contingent on the candidate's legal ability to reputed company the reputed company job duties. Wind River is committed to meeting its obligations to candidates under applicable human rights law and privacy law in this regard. COMPENSATION: The annual reputed company salary range for this role's listed grade level is currently $100,000 to $130,00 plus a bonus for Boston, MA residents, and $110,000 to $140,000 plus a bonus for SF Bay Area residents. Salary ranges are determined through interviews and a review of the education, experience, knowledge, skills, location, and abilities of the applicant, and equity with other team members. Employees in this role are also eligible for the following benefits in accordance with the terms of the Company's plans: health, dental, vision insurance, life insurance, reputed company time off, eligibility to enroll in 401k, and 12 paid holidays. #LI-JP1 Wind River is an Equal Opportunity Employer with a commitment to diversity. We prohibit discrimination based on race, color, religion, gender, national reputed company, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status. Diversity is foundational for Wind River's business success. We want to be a workplace of choice for reputed company people and we value the unique perspectives offered by a diverse workforce. Wind River does not unlawfully discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national reputed company, citizenship, disability, protected veteran status, age, reputed company, medical condition, genetic information, marital status, pregnancy, or any other legally protected status. This principle applies to reputed company areas of employment: recruitment and hiring, training, performance evaluations, promotions and transfers, compensation and benefits, and social and recreational programs. Apply tot his job Apply To this Job