Security GRC Lead, Forward Deployed Assurance
Core
Technical Security Governance professional bridging Assurance and Engineering to implement scalable security controls and compliance requirements across systems and architectures.
Role type
Senior Security GRC Lead (Forward Deployed Assurance)
Builds
Practical, scalable governance requirements and second-line oversight protocols for engineering teams.
Domain
Enterprise Technology & Infrastructure, Cloud Security, AI Governance
Required skills
Security controls frameworks (NIST, ISO 27001, SOC, SOX, FedRAMP), Cloud security, IAM, Platform engineering, System architecture understanding, Regulatory compliance translation, M&A risk assessment, Incident management, Change management
Preferred skills
Independent control testing, Audit practices, Root-cause analysis, AI security expertise
Technologies
Cloud environments, APIs, Engineering workflows, AI platforms
Responsibilities
Bridge Assurance and Engineering to ensure governance feasibility, Evaluate control implementation in applications and infrastructure, Create feedback loops for control design, Translate regulatory expectations into technical requirements, Develop second-line oversight protocols, Assess risk in M&A, Partner on emerging security requirements, Track compliance framework direction, Drive change management and enablement, Run control incident management, Influence future control design, Drive Security Champion engagement, Report to executive leadership, Represent Assurance in technical discussions
