Principal Security Governance & Audit Specialist
Core
Build a Common Control Framework (CCF) from scratch, map controls to multiple security standards (SOC 2, ISO 27001, FedRAMP, etc.), and manage the governance engine to ensure audit readiness.
Role type
Principal Security Governance & Audit Specialist
Builds
A unified Common Control Framework (CCF) and policy library supporting multiple compliance certifications
Domain
Cybersecurity, Compliance, and Risk Management (GRC)
Required skills
Security Governance, Risk and Compliance (GRC), Common Control Framework (CCF) design, FedRAMP 20x, Policy and Procedure authorship, Exception management, Audit support, Framework intake (ISO/IEC 42001, 27701), Gap assessment, Remediation planning, Engineering requirement translation
Preferred skills
AWS, GitHub, SSO, CI/CD, Compliance Engineering collaboration, AI governance (ISO/IEC 42001)
Technologies
OSCAL, FedRAMP 20x, ISO/IEC 42001, ISO/IEC 27701, AIUC-1
Responsibilities
Build the CCF from 0 to 1, own the policy library and exception process, map FedRAMP 20x requirements, support external and internal audits, drive remediation of audit findings, assess new regulatory frameworks, and report on compliance posture.
Seniority
Principal, hands-on IC with strategic reporting
