Security Engineer - Governance Risk Compliance
Core
Strategic GRC team member ensuring xAI operates within regulatory, ethical, and federal boundaries for government and public sector AI applications.
Role type
Senior GRC Engineer (Government/Cloud)
Builds
Compliance certifications (FedRAMP, CMMC, SOC2), risk mitigation strategies, and security configurations for AI systems.
Domain
AI / Government Cloud / Cybersecurity
Deliverable
client delivery
Required skills
GRC frameworks (FedRAMP, CMMC, NIST 800-53, ISO 27001), risk assessment, audit execution, vulnerability management, POAM/STIG implementation, cloud security controls, liaison management, reporting to leadership
Preferred skills
Systems engineering, AI ethics, regulatory frameworks, third-party risk management, ACAS tools, DoD Cloud Computing SRG
Technologies
FedRAMP, CMMC, NIST 800-53, NIST 800-171, STIG, RMF, ISO 27001, ISO 42001, SOC 2, DoD Cloud Computing SRG
Responsibilities
Execute security compliance implementation and audits; Work with 3PAOs and federal AOs to achieve ATO status; Identify and prioritize risks related to AI operations and cloud deployments; Design and implement risk mitigation strategies; Ensure implementation and monitoring of security configurations; Lead Risk Management Assessment and Authorization (A&A) processes; Conduct regular risk assessments and scenario analyses; Oversee audits and vulnerability management; Act as subject matter expert for risk and compliance; Create and present regular reports on GRC performance.
Seniority
Senior, hands-on IC
