Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Design and operate Onebrief's GRC program across RMF, FedRAMP, CMMC and SOC 2. Build control environments, partner with engineering to implement technical controls (IAM, logging, encryption, segmentation), manage audits and evidence collection, and serve as the compliance lead for customer security reviews.