Principal Security GRC Analyst

About the role

Rescale is seeking a senior individual contributor to lead control implementation, audit readiness, and cross‑framework harmonisation for its cloud‑based HPC and simulation platform. This high‑autonomy position will own complex compliance problems from design through evidence collection and auditor engagement.

Key responsibilities

• Drive large, multi‑month projects to ensure compliance with frameworks such as FedRAMP Moderate, DoD IL5, CMMC Level 2, SOC 2 Type 2, ISO 27001:2022, TISAX AL2, and Facility Clearance License requirements.
• Work directly with auditors and government officials across NIST SP 800 series, FedRAMP, SOC 2, ISO 27001, Cyber Essentials, CSA and others.
• Collaborate with security, IT, engineering, product and platform teams to translate compliance requirements into practical controls.
• Represent the compliance program in customer‑facing discussions, security questionnaires and due‑diligence reviews.
• Draft, implement and manage policies, procedures and automated processes for security, compliance and privacy.

Required profile

• 8+ years of experience with multiple compliance frameworks and audits, including large‑scale implementation projects.
• Deep expertise in at least one security framework (e.g., SOC 2 Type II, ISO 27001, FedRAMP, NIST SP 800 series).
• US citizenship is required.
• Strong self‑starter attitude, detail‑oriented and able to manage complex projects end‑to‑end.

Required skills

• FedRAMP
• SOC 2 Type II
• ISO 27001
• NIST SP 800 series
• CMMC
• TISAX
• GDPR, ITAR, EAR, NISPOM (exposure)
• AI‑enabled compliance tooling (experience preferred)