Security Compliance Architect

Overview

Shape and scale security compliance across highly regulated cloud environments, translating complex regulatory requirements into practical technical and operational solutions and supporting authorization efforts.

What you'll do

• Lead the design and implementation of security compliance architecture for cloud environments subject to FedRAMP and DoD IL5 requirements
• Interpret and operationalize control requirements from frameworks such as NIST SP 800-53, FedRAMP, and the DoD Cloud Computing SRG
• Partner with engineering and infrastructure teams to build compliant, scalable, and secure solutions
• Drive audit readiness and serve as a compliance architect SME for assessors, auditors, customers, and internal stakeholders
• Conduct gap assessments, identify control deficiencies, and partner with cross-functional teams to design and implement automation solutions for compliance operations

What you'll need

• Foundational understanding of AI/ML technologies and experience leveraging, securing, or positioning AI-driven solutions to optimize outcomes within your functional domain
• 8+ years of experience in security compliance, security architecture, GRC, cloud security, or related fields
• Demonstrated experience with FedRAMP compliance programs, authorization support, and DoD IL5 requirements
• Deep familiarity with NIST SP 800-53 and applying security controls in cloud environments such as AWS, Azure, and/or Google Cloud
• Strong documentation, program management, and cross-functional collaboration skills with experience automating compliance activities

Nice to have

• Experience designing and deploying AI-forward automated solutions for control monitoring, evidence gathering, and compliance workflow optimization within regulated cloud frameworks
• Experience with privacy, data protection, or privacy-by-design programs
• Experience with additional frameworks such as CMMC, ISO 27001, SOC 2, FIPS 140-2/140-3, or StateRAMP

Details

• Location: Remote - USA; San Jose, CA preferred, with remote candidates considered
• Reports to the Director, Technology Risk & Compliance in the Exposure Management & Security Operations department
• Full-time position