• Bachelor’s degree in computer science, Information Security, or a related field; advanced degree preferred
• 3+ years of experience in a security engineering role, with a focus on compliance in aerospace or regulated industry
• In-depth knowledge of relevant industry standards and regulations, such as: ISO 27001, NIST 800-171, NIST 800-53, CMMC, PCI DSS. HIPAA, HITRUST
• Experience conducting risk assessments, vulnerability scans, and security audits
• Strong understanding of security and networking technologies and tools

Desirable

• As an Aerospace Senior Governance Risk & Compliance (GRC) Analyst, you will play a critical role in ensuring the security and integrity of our systems and operations
• You will be responsible for validating and maintaining security measures to safeguard our sensitive information and assets, while also ensuring compliance with relevant federal standards and regulations
• This role offers an exciting opportunity to contribute to the success of a cutting-edge aerospace startup and help shape the future of the industry
• Performing Risk Assessments / Gap Analysis against Federal Standards and Best Practices
• Manage NIST 800-171 Deliverables (SSP, POA&M, SPRS Scores)
• Help manage Compliance Training
• Prepare / curate and manage compliance artifacts and inventories
• Develop and document security policies
• Audit security controls
• Helping teams assess and gauge security / compliance impact in change management flows
• Disseminating security and compliance principles cross functionally
• Help cross functional teams understand the compliance requirements in practical terms
• Help mediate conversations between teams to leverage teams and resources to help reach compliance controls and objectives
• Work with Legal and External Councils on compliance matters