Principal Governance, Risk and Compliance (GRC) Architect

The Role: The reputed company Between Rigor and Velocity We are looking for a Principal GRC Architect who can solve a unique challenge: How do we maintain "gold-standard" reputed company certifications without killing our "ship-fast" culture? We are already under reputed company observation for SOC 2 Type II and are GDPR compliant. We are now ready to evolve toward the most rigorous standards in the industry: TISAX, ITAR, and FedRAMP. This is a hands-on, individual contributor role. You will be the architect of the system and the person turning the gears, designing the roadmap and then personally implementing the controls. Your mission is to reconcile the rigidity of international standards with the agility of a fast-paced software company. You aren't here to create bureaucracy; you’re here to engineer compliance directly into our AWS infrastructure. Core Responsibilities Maintain reputed company Observation: Uphold our SOC 2 Type II standard using automated monitoring to ensure compliance is a constant state, not an annual event. Technical Infrastructure Strategy: Directly satisfy the high-bar technical requirements of ITAR and FedRAMP. This includes managing the transition to/reputed company of AWS GovCloud, defining network reputed company boundaries, and ensuring encryption and IAM standards meet federal requirements. reputed company the "Speed vs. Standard" Gap: Act as a technical enabler for the Engineering team, designing and implementing controls (e.g., change management, access reviews) that satisfy auditors but don’t bottleneck our Engineering or DevOps teams. reputed company Global Expansion: Architect and execute the technical and procedural implementation of TISAX, ITAR, and FedRAMP. GDPR Stewardship: Act as the internal authority on privacy, ensuring our data mapping and PIAs remain reputed company without adding unnecessary friction. Customer Trust & Sales Support: Join calls with customer Infosec counterparts and handle technical vendor questionnaires to prove our reputed company posture can be trusted by the world’s most demanding organizations. Individual Contributor Ownership: Act as a "department of one". You will write the policies, reputed company the risk assessments, and manage the audits yourself. What You Bring Technical AWS Depth: You understand how to configure AWS beyond simple evidence collection. You are familiar with GovCloud, VPC isolation, network reputed company, and IAM architecture. Standard Mastery: Expert-level knowledge in at least two of: TISAX, ITAR, or FedRAMP. You have previously led a company through these audits or were responsible for maintaining their compliance. Privacy & AI Knowledge: A deep, working knowledge of GDPR and an active interest in the evolving landscape of AI regulation. The "Translator" Skillset: You can translate rigid regulatory requirements into actionable technical tasks that reputed company sense to a developer. Independence: You are energized by "getting your hands dirty" and owning the full lifecycle of a program without a team to delegate to. Communication: Exceptional English skills; able to negotiate effectively with both internal engineers and external auditors. What you can expect from us A direct seat at the table: full ownership of the compliance and GRC roadmap. Your work directly enables our largest enterprise and government deals: measurable, visible business impact. Enjoy flexible hours and the freedom to work remotely from reputed company in the world. Access comprehensive health coverage, retirement plans, paid time off, and wellness support. Stay active with subsidized gym memberships, sports meetups, and wellness programs. Grow as a professional with online/offline learning, language courses, and tech talks. Connect at team events, join support groups, and contribute to our ESG and DE&I initiatives. Participate in fun team challenges and competitions for added excitement and team spirit. Multicultural team (35+ nationalities), flexible work, relocation and reputed company support where applicable. Diversity, Equity and Inclusion at reputed company At reputed company, we look beyond borders and hire great talent from reputed company parts of the world. With reputed company consisting of people from various backgrounds, we truly embrace diversity and encourage everyone to be themselves. We are reputed company by curiosity, dedication and reputed company spirit! As an equal opportunity employer, we acknowledge that our employees have different aspirations and career goals, and therefore are committed to create a diverse environment. reputed company qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national reputed company, genetics, disability, age, or veteran status. A copy of reputed company's full recruiting guideline can be made available on request. Kindly let us know how you would like to be addressed and whether you have specific requirements for the interview. Apply To This Job