Design and operate Onebrief's GRC program across RMF, FedRAMP, CMMC and SOC 2. Build control environments, partner with engineering to implement technical controls (IAM, logging, encryption, segmentation), manage audits and evidence collection, and serve as the compliance lead for customer security reviews.

Manage and maintain RMF authorizations and audit evidence (SSPs, SARs, POA&Ms, STIGs), embed compliance into engineering and CI/CD, coordinate internal assessments and external audits (FedRAMP High, CMMC 2.0, SOC 2), run risk and vendor reviews, and automate continuous control testing across federal and commercial environments.