Senior Governance Risk & Compliance (GRC) Analyst

About the Team:  

The Information Technology team at Relativity Space is responsible for all computing infrastructure (end-user, server, virtualization, and cloud), software and software services, videoconferencing, telecommunications services and equipment, networking, and information security. We work with and support the needs of all internal teams, providing critical infrastructure and services for all operations of the company. The complexity and scale of Information Technology needs at Relativity Space provides many unique opportunities to challenge and elevate strategic and tactical technical skillsets of our team members. We pride ourselves on developing innovative, effective, and highly scalable systems and processes to enable our workforce to design and operate the factory of the future, employing additive manufacturing technologies to build the world's most bad ass rockets. We foster and encourage growth, hold each other accountable, and collaborate extensively with our peers to provide best of breed services and infrastructure to our stakeholders, who happen to be a group of extraordinarily talented, committed, and hyper-achieving set of the greatest minds and people to work with on the planet.  

About the Role: 

As an Aerospace Senior Governance Risk & Compliance (GRC) Analyst, you will play a critical role in ensuring the security and integrity of our systems and operations. You will be responsible for validating and maintaining security measures to safeguard our sensitive information and assets, while also ensuring compliance with relevant federal standards and regulations. This role offers an exciting opportunity to contribute to the success of a cutting-edge aerospace startup and help shape the future of the industry. 

Key Responsibilities: 

Compliance Management: Help Relativity manage compliance with relevant industry standards and regulations by:  

1. Performing Risk Assessments / Gap Analysis against Federal Standards and Best Practices. 
2. Manage NIST 800-171 Deliverables (SSP, POA&M, SPRS Scores). 
3. Help manage Compliance Training. 
4. Prepare / curate and manage compliance artifacts and inventories. 
5. Develop and document security policies. 
6. Audit security controls.   

Cross Functional Team Integration: Help Relativity foster cross functional compliance Collaborations by: 

1. Helping teams assess and gauge security / compliance impact in change management flows.  
2. Disseminating security and compliance principles cross functionally.  
3. Help cross functional teams understand the compliance requirements in practical terms. 
4. Help mediate conversations between teams to leverage teams and resources to help reach compliance controls and objectives. 
5. Work with Legal and External Councils on compliance matters. 

About You:  

• Bachelor's degree
• 3+ years of experience in a security engineering role, with a preferred focus on compliance in aerospace or regulated industry. 
• In-depth knowledge of relevant industry standards and regulations, such as: ISO 27001, NIST 800-171, NIST 800-53, CMMC, PCI DSS. HIPAA, HITRUST 
• Experience conducting risk assessments, vulnerability scans, and security audits. 
• Strong understanding of security and networking technologies and tools. 

Nice to haves but not required:  

• Bachelor’s degree in computer science, Information Security, or a related field; advanced degree preferred
• Certification in relevant security standards (e.g., CISSP, CISM, CISA) preferred. 
• Eligible to obtain a security clearance if needed. 
• Self-Starter and experience with startup environments. 
• Excellent communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and distill complex technical requirements to non-technical teams.