Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 80 days ago

Principal Security GRC Analyst

Rescale18 open roles

Pay
$118,000 – $174,000 a year
Where
Remote (United States)
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPrincipal Security GRC AnalystRescale · Remote (United States)

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Rescale's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. Rescale postings stay open a median of 58 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted 80 days ago

Rescale median: 58 days open

The posting

About Rescale

Rescale is pioneering the future of engineering and scientific discovery. As the leader in digital engineering, we’re transforming how products are developed—through intelligent automation, applied AI, data management, and the integration of the world’s largest network of engineering and R&D applications. Joining Rescale means becoming part of a diverse, collaborative, and mission-driven team that’s unlocking faster innovation across industries like aerospace, energy, life sciences, and manufacturing. We’re solving complex challenges that traditional HPC can’t—and we’re seeking passionate, curious minds to help build the next wave of breakthroughs.

Rescale's Compliance team is responsible for automating, maintaining and maturing a multi-framework compliance program spanning FedRAMP Moderate, DoD IL5, CMMC Level 2, SOC 2 Type 2, ISO 27001:2022, TISAX AL2, and Facility Clearance License (FCL) requirements. As a Principal Security GRC Analyst, you will serve as a senior individual contributor driving control implementation, audit readiness, and cross-framework harmonization across Rescale's cloud-based HPC and simulation platform.

This is a high-autonomy, high-impact role for someone who wants to own complex compliance problems end-to-end from control design through evidence collection to auditor engagement.

Are you a highly-motivated detail-oriented person who loves organizing complex projects? Are you a self-starter who can see a goal and immediately start moving toward it? Are you familiar with FedRAMP, SOC, ISO 27001, TISAX, or other security and compliance frameworks? If so, we need you!

At Rescale, this means you will work on and impact:

- You will work under the guidance of our Director of Compliance to continue to mature a comprehensive security governance, risk, and compliance program.

- You will work directly with auditors and government officials across various security and compliance frameworks such as the NIST SP 800 series, FedRAMP, SOC 2, ISO 27001, Cyber Essentials, CSA and others.

- You will lean into AI to enable our products to comply with new and existing frameworks.

- You will own and drive large projects that span multiple months, quarters and even years to ensure that Rescale is compliant with the frameworks chosen.

- You will interact directly with our security team, IT team and other teams to gather evidence for audits.

- You will partner with engineering, product, platform, and other teams to translate compliance requirements into practical, implementable controls to balance security, compliance, and privacy concerns without sacrificing innovation.

- You will represent the compliance program in customer-facing discussions, security questionnaires and due diligence reviews.

- You will help draft policies and procedures that improve compliance and privacy at Rescale.

- You will create, implement and manage automated processes to improve the dissemination of policies, procedures, plans, and knowledge about security, compliance, and privacy.

- You will work within a team that supports you and wants you to succeed - every single day.

- As our team continues to evolve, this role may expand beyond security compliance. A flexibility and willingness to expand your scope of responsibilities is a plus.

What we’re looking for:

- At least 8+ years experience with multiple compliance frameworks and audits both small and large, including adapting to changes and managing complex implementation projects.

- Deep expertise in at least one security framework such as SOC2 Type II, ISO 27001, FedRAMP, or NIST SP 800 series with a drive to tackle novel compliance challenges in a fast-scaling tech environment

- In addition to the area of expertise, exposure to other frameworks and regulations including GDPR, ITAR, EAR, NISPOM, CMMC, etc. is a plus. Certifications such as CISM, GSLC, Security +CE, CISSP etc. are pluses.

- Due to the nature of the work, US Citizenship is a requirement.

Rescale is an equal opportunities employer and welcomes applications from all qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation or age. As part of our standard hiring process for new employees, employment with Rescale will be contingent upon successful completion of a comprehensive background check. Here at Rescale, we are committed to being transparent in our policies around candidate privacy. For more details on the information Rescale collects in your application, please view the Rescale Applicant Privacy Policy https://rescale.com/company/legal/applicant-privacy-notice/ here.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Rescale's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Rescale's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Rescale's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.