Governance, Risk & Compliance (GRC) Analyst

requirements for partner teams and drive them to execution.</li> <li>Report regularly to the Program Director and executive stakeholders on risk posture, audit status, and program maturity.</li> <li>Onsite presence required 4 days per week.</li> <li>Travel: up to 25%, primarily to support Manufacturing and Physical Security control validation across company sites.</li> <li>Physical demands: occasional access to manufacturing floor environments, including required PPE and periods of standing or walking during facility walkthroughs.</li> <li>Support customer, vendor, supplier, and subcontractor cybersecurity risk management, including questionnaires, contract reviews, security expectations, and customer-facing services.</li> <li>Coordinate cybersecurity audits, assessments, evidence requests, customer reviews, and remediation tracking in partnership with Legal, Compliance, commercial teams, IT, and business leaders.</li> </ul> <p><strong>Minimum

Requirements:</strong></p> <ul> <li>Bachelor’s degree or equivalent experience in computer science, cybersecurity, information security, Information Technology, Information Assurance, or a related field, or equivalent practical experience.</li> <li>Deep knowledge of NIST CSF, NIST RMF, the ISO/IEC 27000 series, UK Cyber Essentials, CMMC/NIST 800-171, NIST 800-53.</li> <li>Experience selecting, implementing, or administering GRC tooling and workflows.</li> <li>Exposure to widely recognized governance, risk, and compliance frameworks spanning security, privacy, and quality management domains.</li> <li>Familiarity with OT/ICS security concepts.</li> <li>Minimum of 5 years hands-on GRC or compliance experience combined with prior experience in a DoD environment or military service.</li> <li>Has directly supported a third-party or certification audit from evidence collection through closure.</li> <li>Can apply recognized governance, risk, and compliance frameworks well enough to design real, working controls tailored to a specific organization, not just describe them generically.</li> <li>Has performed or directly supported a formal risk assessment (identification, scoring, and treatment) using a defined methodology.</li> </ul> <p><strong>Preferred

Requirements:</strong></p> <ul> <li>Experience supporting third-party audits in a cloud-centric environment.</li> <li>Has built or materially contributed to a risk register, control framework, or compliance program, not only operated within one already established elsewhere.</li> <li>Has written policy or procedure documentation that a non-security audience could follow and act on.</li> </ul> <p><strong>Why CHAOS?</strong></p> <ul> <li><strong>Health

Benefits: </strong>Medical, dental, and vision

benefits 100% paid for by the company</li> <li><strong>Additional

benefits</strong>: 401k (+ 50% company match up to 6% of pay), FSA, HSA, life insurance, and more</li> <li><strong>Our

Perks: </strong>Free daily lunch, ‘No meeting Fridays’, unlimited PTO, casual dress code</li> <li><strong>

Compensation Components:</strong> Competitive base salaries, generous pre-IPO stock option grants, relocation assistance, and (coming soon!) annual bonuses</li> <li><strong>Team Growth: </strong>350 employees and counting across 5 global offices</li> </ul> <div><em><strong>Base Salary Range: $120,000 - 150,000</strong></em></div> <p><em>The stated

compensation range reflects only the targeted base

compensation range and excludes additional earnings such as

bonus, equity, and

benefits. If your

compensation

requirements fall outside of the range, we still encourage you to apply. The salary range for this role is an estimate based on a range of

compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. </em></p> <p> </p> <hr> <h3>Recruiting Agencies: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.</h3> <hr> <p> </p> <p><em>#LI-onsite</em></p>

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.