Principal Security GRC Analyst

Rescale

Principal Security GRC Analyst advancing Rescale’s cloud HPC compliance program across FedRAMP, SOC 2, ISO 27001, and CMMC. Owning controls, audits, evidence, and cross-functional governance.

Posted 8/18/2026full-timeRemote • 🇺🇸 United StatesLead💰 $150,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in managing security governance, risk, and compliance programs, with a strong focus on implementing and adapting compliance frameworks such as SOC 2, ISO 27001, and FedRAMP. Capable of collaborating across teams to translate compliance requirements into actionable controls while managing complex projects and ensuring adherence to regulations.

Highest-signal resume keywords

Compliance Framework ExpertiseProject ManagementSecurity GovernanceAudit CoordinationPolicy Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SOC 2 Type IIISO 27001FedRAMPNIST SP 800 SeriesGDPRCMMCITAREARRisk ManagementCompliance Implementation

Soft Skills

Detail-OrientedHighly MotivatedSelf-StartingOrganizational SkillsFlexibility

Certifications & Qualifications

CISMGSLCSecurity+ CECISSP

Industry Keywords

GovernanceRisk ManagementComplianceAuditingPrivacy Policies

About the role

Key responsibilities & impact

Mature and operate a comprehensive security governance, risk, and compliance program
Work directly with auditors and government officials across NIST SP 800 series, FedRAMP, SOC 2, ISO 27001, Cyber Essentials, CSA, and other frameworks
Use AI to enable Rescale products to comply with new and existing frameworks
Own and drive multi-month, quarterly, and multi-year compliance implementation projects
Gather audit evidence from security, IT, and other teams
Partner with engineering, product, platform, and other teams to translate compliance requirements into practical controls
Represent the compliance program in customer discussions, security questionnaires, and due diligence reviews
Draft policies and procedures improving compliance and privacy
Create, implement, and manage automated processes for disseminating security, compliance, and privacy policies, procedures, plans, and knowledge
Potentially expand responsibilities beyond security compliance as the team evolves

Requirements

What you’ll need

At least 8+ years of experience with multiple compliance frameworks and audits, including adapting to changes and managing complex implementation projects
Deep expertise in at least one security framework, such as SOC 2 Type II, ISO 27001, FedRAMP, or NIST SP 800 series
Exposure to GDPR, ITAR, EAR, NISPOM, CMMC, and other frameworks and regulations is a plus
Certifications such as CISM, GSLC, Security+ CE, or CISSP are a plus
US Citizenship is required
Detail-oriented, highly motivated, self-starting, and able to organize complex projects
Flexibility and willingness to expand the scope of responsibilities is a plus

Benefits

Comp & perks

Equity
Comprehensive background check as part of the standard hiring process
Equal-opportunity employment
Supportive team environment
Opportunity to work on high-impact, high-autonomy projects