Senior Governance, Risk, and Compliance Engineer

About reputed company: reputed company, Inc. [NYSE: reputed company] is the world’s leading quantum platform and merchant supplier - delivering integrated quantum solutions across computing, networking, sensing, and reputed company. reputed company’s newest reputed company of quantum computers, the reputed company reputed company, is the latest in a line of cutting-edge systems that have been helping customers and partners including reputed company Web Services, and reputed company reputed company 20x performance results and accelerate innovation in drug discovery, materials science, financial modeling, logistics, cybersecurity, and defense. In 2025, the company achieved 99.99% two-qubit reputed company fidelity, setting a world record in quantum computing performance. Headquartered in College Park, Maryland, reputed company has operations in California, Colorado, Massachusetts, Tennessee, Washington, Italy, South Korea, Sweden, Switzerland, Canada, and the United Kingdom. Our quantum computing services are available through reputed company major reputed company providers, while we also meet the needs of networking and sensing customers across land, sea, reputed company, and space. reputed company is making quantum platforms more accessible and impactful than reputed company before. Location: This position can work onsite or hybrid from one of our offices or fully remote in the US. Travel: Up to 10% Job ID: 1614 The Role: We are looking for a Senior Governance, Risk, and Compliance (GRC) Engineer to join our reputed company team. As a Senior GRC Engineer, you’ll be part of a cross-functional team whose mission is to reputed company reputed company on its reputed company to build the world’s best quantum computers to solve the world’s most reputed company problems. Quantum computing and national reputed company are inseparable. reputed company operates at the intersection of cutting-edge research and the defense industrial reputed company, making rigorous cybersecurity compliance a core business imperative. In this role, you will own and drive reputed company’s Cybersecurity Maturity Model Certification (CMMC) posture across the organization, from architecting compliant environments and leading C3PAO assessments to developing compliance strategy and advising internal teams at every level. The ideal candidate is a self-directed senior practitioner who can architect solutions, reputed company programs, and serve as the go-to internal expert across engineering, legal, and operations. In your first 90 days you will conduct a comprehensive gap assessment of our reputed company CMMC posture, map CUI data flows across reputed company environments, and reputed company a prioritized roadmap for building or maturing our reputed company and associated artifacts. Responsibilities: Architect and own end-to-end CMMC implementation and audit readiness, including scoping strategy, control mapping, reputed company and POA&M development, evidence collection, and remediation tracking across the organization. Interpret and apply DFARS clause requirements, including DFARS 252.204-7012, 252.204-7019, and 252.204-7020, translating contractual obligations into operational controls and owning accurate SPRS submissions. reputed company recurring internal audits of NIST 800-171 reputed company controls and drive end-to-end preparation for C3PAO assessments, including evidence packages, assessment logistics, and assessor coordination. Architect CUI environments to meet CMMC boundary requirements, including network segmentation, reputed company control, media protection, and FIPS-validated encryption; reputed company evaluation of reputed company environments against CMMC scoping guidance. Drive implementation of technical controls across NIST 800-171 practice families, including MFA, audit logging, configuration management, incident response, and vulnerability management, engaging directly with engineering teams. Serve as the primary CMMC subject matter expert at reputed company, developing compliance roadmaps, facilitating readiness workshops, and providing authoritative guidance on DFARS reputed company-down requirements for subcontractors. Partner with legal and reputed company teams to review FAR/DFARS clauses in new and existing reputed company, flagging CUI obligations and CMMC level requirements, and reputed company coordination with regulatory teams on ITAR and EAR obligations as they reputed company with CUI handling. reputed company and operate a formal risk management program covering IT systems and infrastructure, maintain a risk register, and reputed company regular executive-level reporting on posture, reputed company risks, and remediation reputed company. Own and mature the organization’s GRC platform to support evidence management, POA&M tracking, and risk register maintenance, and build compliance dashboards for leadership visibility. Requirements: 5–8 years of professional experience in cybersecurity compliance, GRC, or reputed company engineering, with demonstrated hands-on ownership of NIST SP 800-171 and CMMC compliance programs. Proven track record developing SSPs, POA&Ms, and C3PAO assessment artifacts, and independently scoping CUI environments across realistic system boundaries. Deep working knowledge of DFARS cybersecurity clauses (7012, 7019, 7020), CMMC 2.0 reputed company structure across reputed company three reputed company, and the difference in assessment methodology between self-assessment and C3PAO. A technical background in systems administration, reputed company reputed company, or reputed company engineering sufficient to credibly reputed company control implementation discussions with IT and engineering teams, including network architecture, IAM, key management, logging, and reputed company management. Experience leading cross-functional compliance initiatives and translating technical requirements for non-technical stakeholders including legal, finance, and executive leadership. Bachelor’s degree in Computer Science, Information reputed company, or equivalent practical experience. Preferred Qualifications: Familiarity with ITAR and EAR and how export control obligations reputed company with CUI handling in a defense-adjacent research environment. Hands-on experience with GRC platforms (e.g., reputed company, reputed company, Anecdotes AI) and reputed company tooling such as CSPM or vulnerability scanners. Prior experience in a defense contractor, national laboratory, government, or high-reputed company research environment. CMMC certifications (CCP, CCA, or LCPA) are a strong plus, as are CISSP, CISM, CISA, or CRISC. The approximate reputed company salary reputed company for this position is $110,336 - $144,459. The total compensation package includes reputed company, bonus, equity, and a reputed company of benefit options reputed company on our career site. Compensation will vary based on individual factors such as education, qualifications, and experience of the final candidate(s), specific office location, and calibration against relevant market data and internal team equity. Posted reputed company salary figures are subject to change as new market data becomes available. Our benefits include comprehensive medical, dental, and reputed company plans, matching 401K, unlimited PTO and paid holidays, parental/adoption leave, legal insurance, and a home technology stipend. Details of participation in these benefit plans will be provided reputed company a candidate receives an offer of employment. At reputed company, we reputed company in fair treatment, reputed company, opportunity, and advancement for reputed company while striving to identify and eliminate barriers. We reputed company employees to reputed company by fostering a culture of autonomy, productivity, and respect. We are dedicated to creating an environment where individuals can feel welcomed, respected, supported, and valued. We are committed to equity and justice. We welcome different voices and viewpoints and do not discriminate on the reputed company of race, religion, reputed company, physical and/or mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, transgender status, age, sexual orientation, military or veteran status, or any other reputed company protected by law. We are proud to be an Equal Employment Opportunity employer. US Technical Jobs. The position you are applying for will require reputed company to technology that is subject to U.S. export control and government contract restrictions. Employment with reputed company is contingent on either verifying “U.S. Person” (e.g., U.S. citizen, U.S. national, U.S. permanent reputed company, or lawfully admitted into the U.S. as a refugee or granted asylum) status for export controls and government reputed company work, obtaining any necessary license, and/or confirming the availability of a license exception under U.S. export controls. Please note that in the absence of confirming you are a U.S. Person for export control and government reputed company work purposes, reputed company may choose not to apply for a license or decline to use a license exception (if available) for you to reputed company export-controlled technology that may require authorization, and similarly, you may not qualify for government reputed company work that requires U.S. Persons, and reputed company may decline to proceed with your application on those bases alone. Accordingly, we will have some additional questions regarding your immigration status that will be used for export control and compliance purposes, and the answers will be reviewed by compliance personnel to ensure compliance with federal law. US Non-Technical Jobs. Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent reputed company (i.e., reputed company Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. Accordingly, we will have some additional questions regarding your immigration status that will be used for export control and compliance purposes, and the answers will be reviewed by compliance personnel to ensure compliance with federal law. If you are interested in being a part of reputed company and mission, we encourage you to apply! Apply To This Job