Principal Governance, Risk and Compliance (GRC) Architect

SimScale

Principal GRC Architect designing compliance strategies and implementing controls in a fast-paced software company. Balancing rigorous security standards with the agility of a software engineering culture.

Posted 7/14/2026full-timeRemote • 🌎 Anywhere in the WorldLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in compliance frameworks such as TISAX, ITAR, and FedRAMP, while effectively managing privacy regulations like GDPR. Capable of translating complex regulatory requirements into actionable tasks for technical teams, ensuring continuous compliance and operational efficiency.

Highest-signal resume keywords

AWS ConfigurationTISAX ExpertiseITAR ExpertiseFedRAMP ExpertiseGDPR Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWS ConfigurationTISAX ExpertiseITAR ExpertiseFedRAMP ExpertiseGDPR KnowledgeRisk AssessmentPolicy WritingAudit ManagementChange ManagementAccess Reviews

Soft Skills

Exceptional CommunicationNegotiation SkillsIndependence

Industry Keywords

SOC 2 Type IIContinuous ObservationPrivacy Impact AssessmentsTechnical Vendor QuestionnairesData MappingAI Regulation

Tech Stack

Tools & technologies

AWS

About the role

Key responsibilities & impact

Maintain Continuous Observation: Uphold our SOC 2 Type II standard using automated monitoring to ensure compliance is a constant state, not an annual event.
Technical Infrastructure Strategy: Directly satisfy the high-bar technical requirements of ITAR and FedRAMP.
Bridge the "Speed vs. Standard" Gap: Act as a technical enabler for the Engineering team, designing and implementing controls (e.g., change management, access reviews) that satisfy auditors but don’t bottleneck our Engineering or DevOps teams.
Lead Global Expansion: Architect and execute the technical and procedural implementation of TISAX, ITAR, and FedRAMP.
GDPR Stewardship: Act as the internal authority on privacy, ensuring our data mapping and PIAs remain current without adding unnecessary friction.
Customer Trust & Sales Support: Join calls with customer Infosec counterparts and handle technical vendor questionnaires to prove our security posture can be trusted by the world’s most demanding organizations.
Individual Contributor Ownership: Act as a "department of one". You will write the policies, perform the risk assessments, and manage the audits yourself.

Requirements

What you’ll need

Technical AWS Depth: You understand how to configure AWS beyond simple evidence collection.
Standard Mastery: Expert-level knowledge in at least two of: TISAX, ITAR, or FedRAMP.
Privacy & AI Knowledge: A deep, working knowledge of GDPR and an active interest in the evolving landscape of AI regulation.
The "Translator" Skillset: You can translate rigid regulatory requirements into actionable technical tasks that make sense to a developer.
Independence: You are energized by "getting your hands dirty" and owning the full lifecycle of a program without a team to delegate to.
Communication: Exceptional English skills; able to negotiate effectively with both internal engineers and external auditors.

Benefits

Comp & perks

Enjoy flexible hours and the freedom to work remotely from anywhere in the world.
Access comprehensive health coverage, retirement plans, paid time off, and wellness support.
Stay active with subsidized gym memberships, sports meetups, and wellness programs.
Grow as a professional with online/offline learning, language courses, and tech talks.
Connect at team events, join support groups, and contribute to our ESG and DE&I initiatives.
Participate in fun team challenges and competitions for added excitement and team spirit.
Multicultural team (35+ nationalities), flexible work, relocation and visa support where applicable.