SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 100,000 - 198,000 / annual
xAI (SpaceXSI) is seeking an experienced Governance, Risk, and Compliance (GRC) professional to scale the GRC program as the organization grows. This role focuses on federal compliance frameworks, particularly NIST Risk Management Framework (RMF), FedRAMP, and Impact Level 4/5 (IL4/IL5) authorization processes. The ideal candidate will apply these frameworks end-to-end through the full authorization and certification lifecycle, with strong command of underlying technical implementation.
Key responsibilities include:
- Execute security compliance implementation and audits (DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D Rev. 5/CR2026, NIST 800-53, NIST 800-171/CMMC, Risk Management Framework)
- Oversee audits, certifications, third-party assessments, and vulnerability management
- Design and implement risk mitigation strategies, including monitoring systems, contingency plans, vulnerability scans, Plan of Action and Milestones (POAMs), and STIGs
- Ensure implementation, oversight, monitoring, and maintenance of security configurations throughout the project lifecycle
- Serve as liaison between system owners, security personnel, and cross-functional teams
- Lead Risk Management Assessment and Authorization (A&A) processes and cloud system risk assessments
- Conduct regular risk assessments, scenario analyses, and proactive evaluations of emerging threats in the AI landscape
- Act as subject matter expert on risk, compliance, and cybersecurity matters; translate business and technical risks for leadership
- Create and present regular reports on GRC performance, risks, and compliance status to senior leadership
The role requires deep expertise in federal compliance frameworks and the ability to partner directly with engineers to design, implement, and validate controls. Continuous monitoring artifacts and annual assessments for Grok for Government are key responsibilities.
REQUIREMENTS:
- Bachelor's degree in computer science, Information Security, Cybersecurity, or engineering/STEM field
- 3+ years of experience in governance, risk management, compliance, or technology audit roles
- At least 1 year of experience with FedRAMP/IL5 compliance, vulnerability management, and continuous monitoring
- Experience implementing and maintaining security compliance frameworks and cloud security controls
- Expert-level knowledge in at least one of: DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D, or NIST 800-171/CMMC
PREFERRED:
- 5+ years of security compliance or technology audit experience
- Hands-on experience implementing technical controls (IAM, logging and monitoring, encryption, infrastructure hardening) and integrating compliance checks into CI/CD pipelines
- Exceptional analytical, problem-solving, organizational, and project management skills
- Ability to evaluate control objectives with IT configurations
- Experience in tech or AI industry, particularly with startups or innovative organizations
- Experience with CI/CD pipelines and DevSecOps practices, including compliance-as-code frameworks (OPA, automated control validation, continuous compliance monitoring)
- Excellent communication, stakeholder management, and translation skills
- Experience with commercial compliance programs (ISO 27001, ISO 42001, SOC 2, NIST CSF)
ITAR REQUIREMENT: Applicant must be a U.S. citizen or national, U.S. lawful permanent resident, Refugee, or Asylee, or be eligible to obtain required authorizations from the U.S. Department of State.
