SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 100,000 - 198,000 / annual
SpaceXSI is seeking an experienced Governance, Risk, and Compliance (GRC) professional to scale its GRC program as the organization grows. This role is critical to ensuring SpaceXSI operates within regulatory, ethical, and operational boundaries while maintaining a culture of integrity and resilience.
The primary focus is to provide deep expertise in the NIST Risk Management Framework (RMF), FedRAMP, and Impact Level 4/5 (IL4/IL5) authorization processes. You will apply these frameworks end-to-end through the full authorization and certification lifecycle, with strong command of underlying technical implementation. You will manage and maintain Continuous Monitoring artifacts and annual assessments for Grok for Government, and be equally comfortable interpreting control requirements and partnering directly with engineers to design, implement, and validate controls.
Key responsibilities include:
- Execute security compliance implementation and audits (DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D Rev. 5/CR2026, NIST 800-53, NIST 800-171/CMMC, Risk Management Framework)
- Oversee audits, certifications, third-party assessments, and vulnerability management
- Design and implement risk mitigation strategies, including monitoring systems, contingency plans, vulnerability scans, POAMs, and STIGs
- Ensure implementation, oversight, monitoring, and maintenance of security configurations throughout the project lifecycle
- Serve as liaison between system owners, security personnel, and cross-functional teams
- Lead Risk Management Assessment and Authorization (A&A) processes and cloud system risk assessments
- Conduct regular risk assessments, scenario analyses, and proactive evaluations of emerging threats and technologies in the AI landscape
- Act as subject matter expert, providing guidance on risk, compliance, and cybersecurity; translate business and technical risks for leadership
- Create and present regular reports on GRC performance, risks, and compliance status to senior leadership
REQUIREMENTS:
- Bachelor's degree in Computer Science, Information Security, Cybersecurity, or engineering/STEM field
- 3+ years of experience in governance, risk management, compliance, or technology audit roles
- At least 1 year of experience with FedRAMP/IL5 compliance, vulnerability management, and continuous monitoring
- Experience implementing and maintaining security compliance frameworks and cloud security controls
- Expert-level knowledge in at least one of: DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D, or NIST 800-171/CMMC
PREFERRED QUALIFICATIONS:
- 5+ years of security compliance or technology audit experience
- Hands-on experience implementing technical controls (IAM, logging and monitoring, encryption, infrastructure hardening) and integrating compliance checks into CI/CD pipelines
- Exceptional analytical, problem-solving, organizational, and project management skills
- Ability to evaluate control objectives with IT configurations
- Experience in tech or AI industry, particularly with startups or innovative organizations
- Experience with CI/CD pipelines and DevSecOps practices, including compliance-as-code (OPA, automated control validation, continuous compliance monitoring)
- Excellent communication, stakeholder management, and translation skills
- Experience with commercial compliance programs (ISO 27001, ISO 42001, SOC 2, NIST CSF, NIST 800-53)
ITAR REQUIREMENTS: Applicant must be a U.S. citizen, national, lawful permanent resident, Refugee, or Asylee, or be eligible to obtain required authorizations from the U.S. Department of State.
