GRC Program Architect

WHY THIS ROLE EXISTS:

• Onebrief sells to defense and government customers requiring proof of data protection.
• This role owns the architecture behind our compliance posture across FedRAMP, CMMC, SOC 2, and international frameworks.
• Compliance and security engineering must be integrated to implement technical controls.

WHAT YOU’LL DO:

• Own the design and implementation of Onebrief's GRC framework across RMF, FedRAMP, CMMC, SOC 2, and other applicable standards.
• Build and manage the control environment, including policies, procedures, and evidence collection systems.
• Design and implement technical security controls in partnership with Product, Engineering, Infrastructure and Corporate IT.

MINIMUM QUALIFICATIONS:

• 5+ years of experience in GRC, security engineering, or a combined compliance and technical security role.
• Direct experience with RMF, FedRAMP, CMMC, or equivalent federal compliance frameworks.
• Hands-on experience implementing technical security controls, such as IAM, logging and monitoring, network segmentation, or encryption.