Principal Governance, Risk and Compliance (GRC) Architect
RemoteGermany
Job Summary
Maintain continuous SOC 2 Type II observation via automated monitoring and act as the internal GDPR authority to ensure data mapping and PIAs remain current. Architect and execute the technical implementation of TISAX, ITAR, and FedRAMP standards while managing the transition to AWS GovCloud and defining network security boundaries. Bridge the gap between regulatory rigidity and engineering agility by designing controls for change management and access reviews that satisfy auditors without bottling the DevOps team. Lead global expansion efforts, write policies, perform risk assessments, and manage audits as a department of one. Join calls with customer Infosec counterparts and handle technical vendor questionnaires to prove security posture to demanding organizations.
Required Qualifications
- Expert-level knowledge in at least two of: TISAX, ITAR, or FedRAMP
- Experience previously leading a company through these audits or being responsible for maintaining their compliance
- Deep, working knowledge of GDPR
- Active interest in the evolving landscape of AI regulation
- Exceptional English skills
- Ability to negotiate effectively with both internal engineers and external auditors
- Ability to work remotely from anywhere in the world
- Ability to relocate and receive visa support where applicable
Desired Qualifications
- Understanding of how to configure AWS beyond simple evidence collection
- Familiarity with AWS GovCloud
- Knowledge of VPC isolation
- Knowledge of network security
- Knowledge of IAM architecture
- Ability to translate rigid regulatory requirements into actionable technical tasks that make sense to a developer
- Being energized by getting your hands dirty and owning the full lifecycle of a program without a team to delegate to
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.