1. Home
  2. Remote Jobs
  3. Compliance Officer 1728e4

Compliance Officer

At Mechanical Orchard, we specialize in safely rewriting the most critical and complex business applications—the software that runs the world as we know it today—so they’re ready to adapt quickly and easily to market challenges and opportunities. Our approach emerged from observing the decades-long failure patterns in modernization efforts and is designed to eliminate the risks and disruptions that characterize most projects.

Our background in software development and the impact on the industry is well known: we've literally helped write the book on XP and other impactful Agile practices. We’re applying the same thoughtfulness and rigor in applying AI pragmatically where it helps. We believe in the durable principles behind Agile, and embrace the power of cross-functional teams, collective ownership, test driven development, short feedback loops, and continuous improvement.

We’re bringing joy to beleaguered IT teams everywhere. Together, we’re seeing how applying craft, expertise, and technologies we’re building can fundamentally transform the way companies operate, innovate, and win. Our values are: Do the right thing. Do what works. Be kind.

We are seeking a highly skilled and motivated Compliance Officer to oversee and manage our organization's compliance with legal, regulatory, and industry standards, with a strong focus on FedRAMP/FISMA/CMMC, ISO 27001, SOC 2, CCPA and GDPR. This role is critical in ensuring our business operations align with applicable regulations and support our reputation as a trusted provider of software solutions.

The Compliance Officer will work closely with internal teams and external stakeholders to develop and implement compliance policies, conduct audits, manage risk, and lead our FedRAMP and other certification initiatives.

Responsibilities

    • Compliance Management: Develop, implement, and maintain compliance policies and procedures aligned with FedRAMP, FISMA, ISO 27001, SOC 2, CCPA and GDPR standards. Monitor regulatory developments and ensure the company adapts to changes in laws and standards.
    • FedRAMP and Certification Leadership: Lead the FedRAMP authorization process, including preparation of documentation, managing audits, and coordinating with 3PAOs (Third-Party Assessment Organizations). Ensure continuous compliance with FedRAMP Moderate Baseline requirements (any maybe High in the future) and other relevant frameworks.
    • Risk Assessment and Mitigation: Conduct regular risk assessments and gap analyses to identify areas of non-compliance or vulnerability. Develop and implement remediation plans to address identified risks.
    • Internal Audits and Monitoring: Plan and execute internal compliance audits across departments. Monitor the effectiveness of controls and identify opportunities for improvement.
    • Training and Awareness: Develop and deliver compliance training programs to employees. Foster a culture of compliance and ethical behavior within the organization.
    • Reporting and Documentation: Prepare detailed compliance reports for senior management and regulatory bodies. Maintain accurate and up-to-date records of compliance activities and certifications.
    • Stakeholder Collaboration: Act as a liaison with regulatory agencies, auditors, and customers regarding compliance matters. Work closely with legal, IT, HR, and other teams to ensure alignment across departments.

Qualifications

    • Education: A degree in Business Administration, Law, Information Security, or a related field.
    • Experience: Minimum of 5 years in compliance, information security, or a related field.
    • FedRAMP: Proven experience with FedRAMP or similar formal authorization processes (Moderate or High Baseline).
    • Frameworks: Experience with ISO 27001, SOC 2, FISMA, CCPA, GDPR frameworks.
    • Certifications: Preferred certifications include CISA, CISM, CISSP, or Certified FedRAMP Practitioner.

Skills

    • Strong knowledge of risk management and compliance practices.
    • Excellent organizational, analytical, and problem-solving skills.
    • Ability to communicate complex compliance concepts effectively to diverse audiences.
Mechanical Orchard, Inc. is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind. Mechanical Orchard, Inc. is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Mechanical Orchard, Inc. are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Mechanical Orchard, Inc. will not tolerate discrimination or harassment based on any of these characteristics. Mechanical Orchard, Inc. encourages applicants of all ages. Mechanical Orchard, Inc. will provide reasonable accommodation to employees who have protected disabilities consistent with local law.

We look forward to reviewing your application. Thanks!
Apply for this job

Mechanical Orchard

Category

Legal

Employment type

Full-Time

Location

Remote

Salary range

Prefer not to share

Posted

14 hours ago

Similar Jobs