Note: The job is a remote job and is open to candidates in USA. Rescale is pioneering the future of engineering and scientific discovery through intelligent automation, applied AI, data management, and a broad network of engineering and R&D applications. The Principal Security GRC Analyst will drive control implementation, audit readiness, and cross-framework harmonization across Rescale’s cloud-based HPC and simulation platform, working with auditors, government officials, and internal teams. The role owns complex compliance projects, translates requirements into practical controls, and supports policies, procedures, automation, and customer-facing compliance activities.
Responsibilities
- You will work under the guidance of our Director of Compliance to continue to mature a comprehensive security governance, risk, and compliance program
- You will work directly with auditors and government officials across various security and compliance frameworks such as the NIST SP 800 series, FedRAMP, SOC 2, ISO 27001, Cyber Essentials, CSA and others
- You will lean into AI to enable our products to comply with new and existing frameworks
- You will own and drive large projects that span multiple months, quarters and even years to ensure that Rescale is compliant with the frameworks chosen
- You will interact directly with our security team, IT team and other teams to gather evidence for audits
- You will partner with engineering, product, platform, and other teams to translate compliance requirements into practical, implementable controls to balance security, compliance, and privacy concerns without sacrificing innovation
- You will represent the compliance program in customer-facing discussions, security questionnaires and due diligence reviews
- You will help draft policies and procedures that improve compliance and privacy at Rescale
- You will create, implement and manage automated processes to improve the dissemination of policies, procedures, plans, and knowledge about security, compliance, and privacy
- You will work within a team that supports you and wants you to succeed - every single day
- As our team continues to evolve, this role may expand beyond security compliance. A flexibility and willingness to expand your scope of responsibilities is a plus
Skills
- At least 8+ years experience with multiple compliance frameworks and audits both small and large, including adapting to changes and managing complex implementation projects
- Due to the nature of the work, US Citizenship is a requirement
- Deep expertise in at least one security framework such as SOC2 Type II, ISO 27001, FedRAMP, or NIST SP 800 series with a drive to tackle novel compliance challenges in a fast-scaling tech environment
- In addition to the area of expertise, exposure to other frameworks and regulations including GDPR, ITAR, EAR, NISPOM, CMMC, etc. is a plus
- Certifications such as CISM, GSLC, Security +CE, CISSP etc. are pluses
Company Overview