Solution Architect | GRC (Remote)

Who is Trace3? We appreciate the individuality of the people around us. Lead complex GRC, security, privacy, risk, and AI engagementsFacilitate client workshops to provide education and expertise with clients and executive stakeholders.Assess current-state capabilities across people, process, and technology and define practical target states, priorities, dependencies, and implementation roadmaps.Apply leading frameworks and regulations, including NIST CSF, NIST RMF, NIST 800-53, ISO 27001, ISO 27005, SOC 2, PCI DSS, HIPAA, FFIEC, GLBA, SOX, GDPR, and CMMC, as appropriate to the client environment.Translate regulatory and security requirements into tailored control environments, governance models, policies, procedures, standards, guidelines, workflows, and measurable program objectives.Oversee high-quality deliverables, including assessment reports, gap analyses, maturity models, risk registers, control mappings, executive briefings, strategic roadmaps, project plans, and operating-model recommendations.Maintain trusted relationships with client sponsors, decision-makers, control owners, and partner teams.Advise organizations on the governance, risk, security, privacy, and compliance implications of artificial intelligence, machine learning, generative AI, and agentic AI.Monitor and inform the practice and its clients on emerging and applicable AI laws, regulations, regulatory guidance, standards, and contractual requirements, including the EU AI Act, U.S. federal and state developments, GDPR-related obligations, and sector-specific requirements.Translate evolving AI requirements into practical policies, standards, controls, governance processes, evidence requirements, and implementation roadmaps.Help define, mature, package, and operationalize Trace3’s GRC service portfolio and delivery methodologies.Establish reusable approaches, templates, quality standards, and intellectual property that improve consistency, scalability, and client outcomes.Serve as a senior GRC thought leader in client meetings, internal enablement sessions, industry events, partner activities, and published content.Track GRC-adjacent technologies and build partnerships with solution/market leaders on capabilities across control management, trust centers, third-party risk management, risk management, privacy operations, and AI governance. We are committed to providing equal employment opportunities for all. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.