Skip to content
xAIxAINew York, NY

Member of Technical Staff, Governance Risk Compliance

Lead GRC initiatives ensuring xAI meets federal compliance standards (FedRAMP, NIST, CMMC) while managing risk for AI systems and cloud deployments. Requires 3+ years in security compliance, a bachelor's degree, and expertise in federal frameworks.

100k – 228k/yr
On-siteSecurity Engineering

About the role

Responsibilities

  • Execute security compliance implementation and audits (e.g., ISO 27001/42001, SOC2, FedRAMP HIGH, DoD Cloud Computing SRG IL5/IL6, NIST 800-53 rev 5, NIST 800-171/CMMC, Risk Management Framework).
  • Work with 3PAOs and federal government Authorizing Officials to achieve compliance certifications, reports, and ATO status.
  • Identify, assess, and prioritize risks related to AI operations, cybersecurity, regulatory compliance, intellectual property, and cloud deployments.
  • Design and implement risk mitigation strategies, including monitoring systems, contingency plans, vulnerability scans, POAMs, and STIGs.
  • Ensure the implementation, oversight, monitoring, and maintenance of security configurations, practices, and procedures throughout the project lifecycle.
  • Serve as a liaison between system owners, security personnel, and cross-functional teams.
  • Lead Risk Management Assessment and Authorization (A&A) processes, cloud system risk assessments, compliance reviews for new products/changes/features.
  • Conduct regular risk assessments, scenario analyses, and proactive evaluations of emerging threats.
  • Oversee audits, certifications, third-party assessments, and vulnerability management.
  • Act as a subject matter expert, providing guidance on risk, compliance, and cybersecurity matters.
  • Create and present regular reports on GRC performance, risks, and compliance status to senior leadership.

Requirements

  • 3+ years of experience in governance, risk management, compliance, or technology audit roles.
  • Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field.
  • Proven expertise in regulatory frameworks, data privacy, cybersecurity, and federal compliance standards.
  • Strong understanding of AI ethics, Risk Management Framework (RMF), and associated risks.
  • Experience with vulnerability management, POAMs, STIG implementation, and cloud security controls.
  • Ability to evaluate control objectives with IT configurations.
  • Exceptional analytical, problem-solving, organizational, and project management skills.
  • Excellent communication, stakeholder management, and translation skills.

Nice-to-Haves

  • Previous systems engineering experience.
  • Certifications like CISA, CRISC, CGEIT, Security+, CASP+.
  • Experience in the tech or AI industry, particularly with startups or government/public sector engagements.
  • Deep expertise maintaining frameworks such as FedRAMP, DoD Cloud Computing SRG, NIST 800-171, NIST 800-53, CMMC, and STIG/RMF policies.
  • Familiarity with ISO 27001, ISO 42001, NIST, SOC 2.
  • Background in managing third-party risk, vendor compliance programs, or federal assessments.
  • 5+ years of security compliance or technology audit-related experience.

Skills

FedRAMPNist 800-53Nist 800-171CmmcSOC 2ISO 27001Risk Management FrameworkStigPoamVulnerability ManagementCloud SecurityCisaCrisc

Similar roles

Security Engineering jobs
Shield AI

Staff International Security Specialist

Shield AIDallas, TX

Develops and manages integrated international security programs covering personnel, physical, communications, cyber, and information security. Requires 10+ years experience, bachelor's degree, and ability to obtain U.S. security clearance.

100k – 150k/yr
On-site10+ YOESecurity Engineering
Shield AI

Staff COMSEC Officer

Shield AIWashington, DC

As a Staff COMSEC Officer, you will manage, direct, and administer the company's COMSEC program, ensuring strict adherence to DoD policies and requirements. You will oversee the full lifecycle of programs, act as the primary interface with government agencies, and manage COMSEC compliance for deployed networks.

100k – 150k/yr
On-site5+ YOESecurity Engineering
Shield AI

Staff Contractor Program Security Officer (R4898)

Shield AIWashington, DC

Manages security for DoD special access programs, handling classified material accountability, personnel clearances, briefings, inspections, and physical security systems while interfacing with government agencies. Requires 3-6 years security admin experience and active Top Secret/SCI clearance.

100k – 150k/yr
On-siteSecurity Engineering
MongoDB

Security Software Engineer, Infrastructure Security (Staff or Senior)

MongoDBAustin, TX +2

Designs and builds scalable security controls and services for MongoDB Atlas multi-cloud infrastructure using Linux mechanisms, Kubernetes, and eBPF. Requires 5+ years experience in software/SRE with security focus, proficiency in systems programming, and cloud platforms.

127k – 249k/yr
Remote5+ YOESecurity Engineering
Kraken

Staff Security Architect

KrakenUnited States

Design and review security architectures for Kraken's crypto products, conduct assessments, and provide hands-on security consulting across blockchain, infrastructure, and AI projects.

127k – 254k/yr
RemoteSecurity Engineering