Director of Governance, Risk, and Compliance

Job Summary

A company is looking for a Director of Governance, Risk, and Compliance (GRC).

Key Responsibilities

• Lead the strategy and lifecycle for SOC 2 Type II and FedRAMP Moderate authorizations
• Oversee vendor risk management and ensure compliance standards are met across third-party providers
• Serve as the primary lead for incident response activities and maintain response playbooks

Required Qualifications

• CISSP certification is strictly required
• 8+ years of experience in GRC or Information Security leadership within a high-growth SaaS environment
• Direct experience achieving or maintaining a FedRAMP Moderate ATO
• Proven ability to lead through security events and design robust response frameworks
• Technical literacy in cloud architecture (AWS/Azure) and IAM roles