- New York, New York, United States
Lead GRC function overseeing compliance programs such as FedRAMP, SOC 2, CMMC, and CE+ across Nominal’s hardware engineering initiatives.
Responsibilities
- Own a single view across FedRAMP, SOC 2, CMMC, and CE+
- Run gap analysis and control uplift planning across frameworks
- Sequence remediation across engineering, IT, and security
- Own the evidence tracker and drive task owners to closure
- Coordinate audit readiness and assessor logistics
Requirements
- Nice to have: GRC function building
- Nice to have: compliance automation
- Nice to have: Drata
- Nice to have: Vanta
- Nice to have: defense contractor experience