Own RMF authorizations across Department of War components and FedRAMP High, alongside CMMC 2.0 and SOC 2 compliance for corporate systems
Maintain authorization and audit evidence, including SSPs, SARs, POA&Ms, STIGs, and control mappings
Partner with Engineering, Product, and Security to embed compliance requirements into system design and CI/CD workflows, not bolt them on afterward
Coordinate internal assessments and external audit readiness across all applicable frameworks
Track regulatory and contractual changes and advise leadership on what they mean for Onebrief
Run risk assessments and vendor/supply chain risk reviews across both federal and corporate environments

U.S. Citizen
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field
8+ years in cybersecurity compliance
Hands-on expertise with RMF and at least one of CMMC 2.0 or SOC 2
One or more of the following certifications: CISSP, CISM, CISSO, CPTE, CySA+, FITSP-A, GCSA, CISA, ISSEP, GSLC, or GSNA
Experience with GRC platforms, including automated evidence collection and testing (eMASS experience a plus)

Equity: Share in the company's success.
Flexible Work Environment: Remote-first organization with flexible work hours and unlimited PTO.
Comprehensive Health Coverage: Health, dental, vision, and life insurance.
Retirement Plan: 401(k) plan with company match to secure your future.
Parental Leave: 8 weeks at 100% regardless of state.
Company Retreats: Annual company summit trips.
Home Office Budget: $1,000 per year for home office improvements.

Corporate Governance, Risk and Compliance Analyst

Key skills