Principal GRC, Cyber Security Data Architect
American IT Systems
Principal GRC, Cyber Security Data Architect
SAN FRANCISCO, CA
Purpose
Lead the delivery of a NIST CSF 2.0 cybersecurity gap and maturity assessment for a global enterprise program, covering assessment planning, stakeholder engagement, evidence review, maturity scoring, risk based gap prioritization, executive reporting, and development of a practical improvement roadmap.
Key Responsibilities
- Own end to end engagement governance, project planning, milestones, risks, dependencies, status reporting, and stakeholder communications.
- Conduct NIST CSF 2.0 maturity assessment across functions, categories, subcategories, implementation tiers, and profiles.
- Review policies, standards, procedures, controls, risk registers, asset inventories, KPIs/KRIs, and supporting evidence.
- Facilitate interviews and workshops with cybersecurity, risk, compliance, technology, and business stakeholders.
- Define defensible maturity scoring, identify control gaps, assess business risk, and prioritize remediation actions.
- Develop executive ready assessment reports, maturity dashboards, prioritized recommendations, and near/mid/long term roadmap.
Required Experience
AreaRequirement
Total Experience10 to 15 years in cybersecurity, GRC, risk management, audit, security consulting, or cybersecurity program assessment.
NIST CSF ExpertiseStrong hands on experience with NIST CSF, preferably NIST CSF 2.0 maturity assessments.
Framework MappingExperience mapping controls across NIST CSF, ISO 27001, NIST 800 53, CIS Controls, SOC 2, or similar frameworks.
Assessment DeliveryProven experience conducting enterprise wide cybersecurity maturity, gap, risk, or control assessments.
Stakeholder ManagementAbility to conduct interviews/workshops with senior security, risk, compliance, technology, and business stakeholders.
Executive ReportingStrong experience creating leadership ready cybersecurity reports, maturity dashboards, and roadmap presentations.
Consulting DeliveryExperience working in consulting/advisory environments with structured methodology, governance, and client facing deliverables.
Risk PrioritizationAbility to convert control gaps into risk ranked remediation recommendations and practical roadmaps.
Required Skills
- Strong expertise in NIST CSF 2.0, cybersecurity governance, risk management, compliance, control maturity models, and ISO 27001 / ISMS.
- Ability to map controls across NIST CSF, ISO 27001, NIST 800 53, CIS Controls, SOC 2, and similar frameworks.
- Experience in evidence based assessment, maturity scoring, risk based gap prioritization, and remediation roadmap development.
- Excellent consulting delivery, workshop facilitation, stakeholder management, executive reporting, and written/verbal communication skills.
Preferred Certifications
- CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor / Lead Implementer, NIST CSF training/certification, PMP / Prince2 / Agile certification preferred.
Tools / Platforms Knowledge Preferred
- GRC and evidence management platforms such as Archer, ServiceNow GRC, OneTrust, MetricStream, SharePoint, Teams, Excel, PowerPoint, Visio, Power BI, and cybersecurity KPI/KRI dashboarding tools.
Vacancy posted 2 days ago
Similar jobs that could be interesting for youBased on the Principal GRC, Cyber Security Data Architect in San Francisco, CA vacancy
- ...institutions that impact millions of people. As our GRC Lead, you’ll own the governance, risk, and... ...0-171, FedRAMP/GovRAMP, GLBA, and US/MENA data residency on the near-term roadmap. That’s... ...reviews, data flow inventory, contractual security obligations, and a reassessment cadence...SuggestedWorldwideDay shift
- ...privacy by design and customer trust. You will implement frameworks like SOC 2, ISO 27001 and HIPAA, ensure GDPR/CCPA/CPRA compliance, design scalable audit processes and a robust GRC platform, and help lead regulatory strategy for AI safety. #J-18808-Ljbffr PerplexitySuggested
$123.62k - $267.75k
The Principal Data Architect is a leadership position responsible for developing the vision for AI-enabled data ecosystems, defining the Enterprise... ...multiple areas of concern including data governance, data security, AI/ML use of data etc. the individual must have supreme...PrincipalLocal area$120k - $175k
Technology Cyber Security ArchitectCooley is seeking a Cyber Security Architect to join the technology team.Position summary: Cooley Technology embraces a culture of customer... ...with engineering, infrastructure, DevOps, and data teams to embed security, privacy, and governance...SuggestedFull timeTemporary workWork at officeFlexible hoursWeekend work- ...Washington D.C., London and Amsterdam.The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security... ...our customers, consumers, and data partners. We own Plaid’s security... ...evidence.Responsibilities:Architect GRC's Engineering Foundation: Build...SuggestedWork experience placementWork at officeLocal areaShift work
- ...Palo Alto Networks, Inc. is seeking a Sr. Principal Software Engineer to lead the development... ...teams to innovate and deliver impactful security solutions. The ideal candidate will possess... ...software development, especially with data path and control plane architectures. A...Principal
- ...LOCATION: REMOTE Job Description: The Senior Cyber Risk Management Capability Assessor will... ...degree in Cybersecurity, Information Security, Computer Science, or a related field. Certifications... ..., technical security controls, and data protection strategies. Seniority level...Contract workRemote work
$105.4k - $207.8k
Position Summary Cyber SAP Security and GRC Access & Process Control Senior Consultant / Senior Engineering Management SpecialistJoin Deloitte’s Enterprise Security team and help clients strengthen SAP security across enterprise transformation, cloud modernization...Local areaVisa sponsorship- ...Responsibilities Roles DescriptionThe Principal Enterprise Security Engineer serves as the senior... ...covering endpoint, identity, network, and data.Lead the architectural reviews of... ...product leaders, and other principal architects to drive large-scale security initiatives...PrincipalWork at officeLocal area
$90k - $210k
...transformation, we are establishing a modern enterprise data foundation powered by Databricks to unify data across engineering... ...chain, finance and commercial systems.We are seeking a Principal Enterprise Data Architect, a highly hands-on individual contributor who will design...PrincipalFull timeFlexible hours- ...best work — both in and out of the office. The Staff Enterprise Data Architect defines the overarching architectural vision and framework for... ...stakeholders (e.g., Finance, Operations, HR, Engineering, IT, GRC) to translate business ideas and strategic direction into...Work at officeLocal areaRemote workFlexible hours
- ...Security Architect This position will report to the CISO and will engage across various members of the security team including (Deputy CISO... ...with the CISO to ensure the security of our systems and data. Design and implement security solutions to protect systems...
RIT Solutions
San Francisco, CA4 days ago - ...Join SignalFire’s Talent Network for Principal AI/ML Engineer Roles at VC-Backed Startups... ...deep learning models ✔ Experienced in architecting scalable AI systems and leading technical... ...Work closely with engineering, data, and product teams to integrate AI/ML into...PrincipalFull time
Signal Fire Inc
San Francisco, CA1 day ago - Genentech, a member of the Roche group, seeks a Principal Data Innovation Specialist (RWD) to explore AI-enabled data strategies across clinical, real-world, and operational data. You will prototype novel capabilities, scale multi-agent architectures, and lead complex...Principal
$275k - $300k
...the TeamThe Information Security organization at Postman... ...Risk & Compliance (GRC), Product Security, and... ...OpportunityWe are looking for a Principal Offensive Security... ..., tool-use abuse, data exfiltration via context... ...multi-agent architectures.Architect Autonomous Testing: Design...PrincipalWork at officeFlexible hours3 days per week$150k - $200k
GFT is seeking a Principal Cybersecurity Compliance Analyst to join our Security and Safety team in Northern California! This... ...governance, risk, and compliance (GRC) programs aligned with FERC (D2... ...brightest engineers, planners, architects, inspectors, designers, and...PrincipalFull timeWork at officeRemote work- ...best work — both in and out of the office. The Staff Enterprise Data Architect defines the overarching architectural vision and framework for... ...stakeholders (e.g., Finance, Operations, HR, Engineering, IT, GRC) to translate business ideas and strategic direction into...Work at officeLocal areaFlexible hours
$175k - $220k
...are looking for a highly technical Senior Security Engineer who thrives on building security... ...mitigate risks such as prompt injection, data leakage, model misuse, excessive... ...Bachelor or Masters in Computer Science, Cyber Security or similar roles.Strong software...Full timeWork at office$77k - $202k
...strengths and address development areas.Interpret data to inform insights and recommendations.... ...integrated risk management frameworks and GRC technologies to enhance client processes... ...these factors thoughtfully to establish a secure and trusted workplace for all....Full timeH1b- ...Palo Alto Networks, Inc. is seeking a Senior Principal Backend Engineer in the Cortex group to lead the... ..., and XSIAM. You will help design robust data pipelines, APIs, and services, partnering with product and security experts to deliver state-of-the-art cybersecurity...Principal
- ...Ability to move fluidly between research prototypes and production-quality systems. Strong evaluation discipline: metrics, ablations, data leakage avoidance, and reproducibility. A demonstrated track record of applying ML to physics-based or inverse problems (i.e.,...PrincipalFull time
Midjourney
San Francisco, CA1 day ago $209.7k - $272.6k
...— you’re surrounded by engineers, product managers,and junior architects. Share what you know. Build the architectural maturity of the teamsaround... ....• You can hold your own in a room with business leaders, data scientists, andengineering leadership — and adjust your...PrincipalMinimum wageWork at office- ...Rail is looking for an enthusiastic self-motivated Senior OT Cyber Security Engineer who thrives in a fast-paced environment. The successful... ...regulations, critical infrastructure protection laws, and data protection and logging constraints.Support alignment with local...Full timeContract workLocal area
$145k - $210k
Senior Cyber Security EngineerCooley is seeking a Senior Cyber Security Engineer to join the Security team.Position summary: Cooley Technology... ...firewalls, VPN, privileged access management (PAM), data loss prevention, EDR, and security information event monitoring...Full timeTemporary workWork at officeFlexible hoursWeekend work$190k - $225k
...Senior Security Engineer We are looking for a highly technical Senior Security Engineer... ...mitigate risks such as prompt injection, data leakage, model misuse, excessive permissions... ...Bachelor or Masters in Computer Science, Cyber Security or similar roles. ~ Strong...WinMax
San Francisco, CA1 day ago$170k - $277k
...waiting for directions.Job SummaryAs a Sr. Principal Software Engineer in the Engineering team... ...to solve complex problems in networking data path software. This role requires working... ...problems and deliver high-impact security solutions.Contribute to all phases of the...PrincipalFull timeWork at office$220.4k - $297.4k
A leading data and AI company in San Francisco is looking for a Senior Data Security Leader to drive security practices and infrastructure improvements. The ideal candidate will possess over 9 years of experience in Data Security, including expertise in areas like Cryptography...$170k - $277k
...ambiguity, excited by the prospect of a challenge, and empowered by the unknown risks facing our everyday lives that are only enabled by a secure digital environment.Job SummaryWe are seeking innovative engineers to design and develop security features for our next-generation...PrincipalFull timeWork at office$220.4k - $297.4k
A leading data and AI company in San Francisco is seeking a Senior Security Engineer to enhance the safety of its platform. The role demands extensive experience in Data Security and distributed systems. The ideal candidate will have strong leadership and communication...$176.6k - $239k
...incident response requirements, and help them secure their generative AI applications.Do you... ...help our customers, partners, solution architects, and consultants build secure solutions.-... ..., infrastructure, security, networking, data & analytics) experience- 3+ years of design...Local areaWorldwideFlexible hours
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Principal GRC, Cyber Security Data Architect. Be the first to apply!
Related searches
- cyber security architect San Francisco, CA
- security architect San Francisco, CA
- database designer San Francisco, CA
- senior data architect San Francisco, CA
- data architect San Francisco, CA
- sr data modeler San Francisco, CA
- data center architect San Francisco, CA
- remote data architect San Francisco, CA
- senior data modeler San Francisco, CA
- data integration architect San Francisco, CA