Job description

Job Description: We are looking for an GRC Lead Architect to design and implement cloud governance, risk, and compliance architecture. The role will translate GRC requirements into enforceable technical policies and controls across cloud environments, ensuring security and compliance are embedded into scalable architectures. Key Responsibilities: Define cloud Governance, Risk & Compliance (GRC) architecture and standards. Implement and manage policies using Wiz Policy and GCP Organization Policy. Map SOC 2 and other compliance frameworks to technical controls. Lead standardized architecture and security reviews. Automate compliance evidence collection and ensure audit-ready documentation. Partner with security, cloud, engineering, and compliance teams to identify and mitigate risks. Ensure cloud scalability aligns with governance, security, and regulatory requirements. Provide defensible security and compliance recommendations to auditors, regulators, and senior leadership. Required Skills: Strong experience in GRC / Cloud Governance / Security Architecture. Hands-on experience with GCP and GCP Organization Policies. Experience with Wiz or similar cloud security platforms. Strong understanding of SOC 2, risk management, and security controls. Experience with cloud architecture reviews and compliance automation. Excellent communication and stakeholder-management skills.

Requirements

Must-haves

Define cloud Governance, Risk & Compliance (GRC) architecture and standards.
Implement and manage policies using Wiz Policy and GCP Organization Policy.
Map SOC 2 and other compliance frameworks to technical controls.
Lead standardized architecture and security reviews.
Automate compliance evidence collection and ensure audit-ready documentation.
Partner with security, cloud, engineering, and compliance teams to identify and mitigate risks.
Ensure cloud scalability aligns with governance, security, and regulatory requirements.
Provide defensible security and compliance recommendations to auditors, regulators, and senior leadership.
Strong experience in GRC / Cloud Governance / Security Architecture.
Hands-on experience with GCP and GCP Organization Policies.
Experience with Wiz or similar cloud security platforms.
Strong understanding of SOC 2, risk management, and security controls.
Experience with cloud architecture reviews and compliance automation.
Excellent communication and stakeholder-management skills.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

gcp

Platform: bamboohr
Effort: medium