$ cat jobs/principal-governance-risk-and-compliance-grc-architect-simscale-gmbh-cd4ea7634765.json
Principal Governance, Risk and Compliance (GRC) Architect
The Role: The Bridge Between Rigor and Velocity We are looking for a Principal GRC Architect who can solve a unique challenge: How do we maintain "gold-standard" security certifications without killing our "ship-fast" culture? We are already under continuous observation for SOC 2 Type II and are GDPR compliant . We are now ready to evolve toward the most rigorous standards in the industry: TISAX, ITAR, and FedRAMP . This is a hands-on, individual contributor role. You will be the architect of the system and the person turning the gears, designing the roadmap and then personally implementing the controls. Your mission is to reconcile the rigidity of international standards with the agility of a fast-paced software company. You aren't here to create bureaucracy; you’re here to engineer compliance directly into our AWS infrastructure . Core Responsibilities Maintain Continuous Observation: Uphold our SOC 2 Type II standard using automated monitoring to ensure compliance is a constant state, not an annual event. Technical Infrastructure Strategy: Directly satisfy the high-bar technical requirements of ITAR and FedRAMP . This includes managing the transition to/oversight of AWS GovCloud , defining network security boundaries, and ensuring encryption and IAM standards meet federal requirements. Bridge the "Speed vs. Standard" Gap: Act as a technical enabler for the Engineering team, designing and implementing controls (e.g., change management, access reviews) that satisfy auditors but don’t bottleneck our Engineering or DevOps teams. Lead Global Expansion: Architect and execute the technical and procedural implementation of TISAX, ITAR, and FedRAMP . GDPR Stewardship: Act as the internal authority on privacy, ensuring our data mapping and PIAs remain current without adding unnecessary friction. Customer Trust & Sales Support: Join calls with customer Infosec counterparts and handle technical vendor questionnaires to prove our security posture can be trusted by the world’s
Similar remote roles
Cloud DevOps Engineer
Accenture Federal Services · Worldwide · mid
DevOps Engineer
mhymatch · APAC · mid
DevOps Engineer
Incode Technologies · Worldwide · mid
Senior SRE/DevOps Engineer (Remote, Colombia/ Brazil) - Min.
exceptionly · US · senior
Security Engineer III
elsevier · UK · mid
Infra - Server Administrator (Korean Bilingual)
Sbtglobalinc · Worldwide · mid
Senior Cloud Network Engineer
NICE · LATAM · senior
Full Stack Tech Lead
gbitcorp · US · senior