Director of Governance, Risk & Compliance (Remote US) Job at Atmosera, Remote

dDI0Mko2SFRETSttVFlocTNhZmxlazFVNmc9PQ==
  • Atmosera
  • Remote

Job Description

Atmosera empowers businesses to redefine what's possible with modern technology and human expertise. Our exceptional experience across Applications, Data & AI, DevOps, Security, and the Microsoft Azure platform enables organizations to accelerate innovation, enhance security, and optimize operational agility. As a Microsoft Partner with seven specializations, GitHub AI Partner of the Year, a member of the GitHub Advisory Board, and a member of the prestigious Microsoft Intelligent Security Association (MISA), Atmosera expertly delivers cutting-edge, integrated solutions that deliver business value. Your Impact The Director of Governance, Risk & Compliance (GRC) leads Atmosera's internal GRC program and Managed Governance, Risk & Compliance (MGRC) services. This is a hands-on leadership role responsible for GRC program strategy, service delivery, team leadership, client engagements, and continuous improvement. The Director will establish scalable GRC processes while directly supporting complex client and internal compliance initiatives. A key responsibility is hands-on management of federal security programs, including System Security Plans (SSPs), control implementation statements, evidence, POA&Ms, remediation activities, and responses to government and assessor findings. The ideal candidate can operate at both the executive and practitioner levels, working effectively with CISOs and auditors while also working directly with engineers and control owners to validate how security controls are implemented. Deliverables include... GRC Program & MGRC Service Leadership - Own Atmosera's internal GRC program and operational delivery of MGRC services. - Establish standardized methodologies, processes, templates, evidence requirements, and quality controls. - Lead risk assessments, control assessments, compliance readiness, policy governance, Managed Audit, Managed Questionnaires, and other GRC engagements. - Manage client commitments, priorities, capacity, deliverable quality, and service performance. - Identify opportunities for automation and AI to improve GRC delivery and scalability. - Partner with Sales and Client Success on service scoping, SOWs, pricing, and complex opportunities.

Federal Compliance & SSP Management - Lead and maintain System Security Plans for federal clients. - Develop and review control implementation statements and supporting evidence. - Coordinate with technical control owners to validate how controls are implemented. - Manage POA&Ms, control deficiencies, remediation activities, milestones, and dependencies. - Coordinate responses to government, assessor, and auditor findings and requests. - Facilitate SSP and control working sessions with clients, engineers, security teams, and other stakeholders. - Support continuous monitoring, security assessments, and authorization activities. - Maintain alignment between documented controls and the actual operating environment. - Support requirements involving NIST SP 800-53, NIST SP 800-171, FISMA, CMMC, FedRAMP concepts, and agency-specific requirements. Risk, Compliance & Audit Management - Lead cybersecurity risk assessments, control gap assessments, risk registers, treatment plans, exceptions, and remediation tracking. - Support frameworks including SOC 2, NIST, CIS, ISO 27001, PCI DSS, HIPAA, CMMC, and Microsoft security benchmarks. - Own Atmosera's Managed Audit methodology, including audit readiness, evidence management, auditor coordination, findings, and remediation. - Oversee Managed Security Questionnaire delivery and development of reusable response and evidence libraries. - Ensure policies, standards, procedures, and control documentation accurately reflect operational practices.

Job Tags

Full time, Remote work

Similar Jobs

AA Home Inspection

Radon Measurement Technician Job at AA Home Inspection

 ...Ohio and Kentucky) FLSA Classification: Non-Exempt Purpose The purpose of this position is to perform professional radon measurements in accordance with applicable state regulations, industry standards, and AA Home Inspection procedures. The Radon Measurement Technician... 

Lundbeck

Psychiatry Account Manager - South Bend, IN Job at Lundbeck

 ...within 40 miles of territory boundaries with access to a major airport. Territory boundaries include: Watervliet & New Buffalo MI, North...  ...Selling - Deliver messages in a clear and compelling way to customers, effectively probe customer needs to handle objections, and... 

Belcan

Assembler I or II Job at Belcan

Job Title: Assembler I or IILocation: Livonia, MIZip Code: 48150Duration: 12 MonthsPay Rate: $14.61 - $19/hr.Work Days: Mon-...  ...Skills, Knowledge and Abilities (required):* Proficient with computer usage.* Ability to learn and follow written instructions.*... 

Johns Hopkins Medicine

MANAGER SUPPLY CHAIN OPS Job at Johns Hopkins Medicine

 ...benefits package, including tuition reimbursement The Manager Supply Chain Ops is responsible for the management and general oversight...  .../logistic operations in support of patient care, in a healthcare materials management setting Education Requirements :... 

Alcon3Pl

Forklift Operator - Ontario 91761 Job at Alcon3Pl

 ...-Time Job Summary Join our dynamic warehouse team as a Forklift Operator and Warehouse Worker, where your energy and precision...  ...including forklifts, reach trucks, Hi-Lo, clamp trucks, Cherry picker and pallet jacks to efficiently load, unload, and move materials...