Principal Security GRC Analyst

Rescale is pioneering the future of engineering and scientific discovery. As the leader in digital engineering, we’re transforming how products are developed—through intelligent automation, applied AI, data management, and the integration of the world’s largest network of engineering and R&D applications. Rescale's Compliance team is responsible for automating, maintaining and maturing a multi-framework compliance program spanning FedRAMP Moderate, DoD IL5, CMMC Level 2, SOC 2 Type 2, ISO 27001:2022, TISAX AL2, and Facility Clearance License (FCL) requirements. As a Principal Security GRC Analyst, you will serve as a senior individual contributor driving control implementation, audit readiness, and cross-framework harmonization across Rescale's cloud-based HPC and simulation platform. This is a high-autonomy, high-impact role for someone who wants to own complex compliance problems end-to-end from control design through evidence collection to auditor engagement.

Responsibilities

Work under the guidance of Director of Compliance to continue to mature a comprehensive security governance, risk, and compliance program; Work directly with auditors and government officials across various security and compliance frameworks such as the NIST SP 800 series, FedRAMP, SOC 2, ISO 27001, Cyber Essentials, CSA and others; Lean into AI to enable products to comply with new and existing frameworks; Own and drive large projects that span multiple months, quarters and even years to ensure compliance; Interact directly with security team, IT team and other teams to gather evidence for audits; Partner with engineering, product, platform, and other teams to translate compliance requirements into practical, implementable controls; Represent the compliance program in customer-facing discussions, security questionnaires and due diligence reviews; Help draft policies and procedures that improve compliance and privacy; Create, implement and manage automated processes to improve dissemination of policies, procedures, plans, and knowledge about security, compliance, and privacy; Work within a team that supports you and wants you to succeed

Requirements

At least 8+ years experience with multiple compliance frameworks and audits both small and large, including adapting to changes and managing complex implementation projects; Deep expertise in at least one security framework such as SOC2 Type II, ISO 27001, FedRAMP, or NIST SP 800 series with a drive to tackle novel compliance challenges in a fast-scaling tech environment; US Citizenship is a requirement

Nice to have

Exposure to other frameworks and regulations including GDPR, ITAR, EAR, NISPOM, CMMC; Certifications such as CISM, GSLC, Security +CE, CISSP; Flexibility and willingness to expand scope of responsibilities