Senior GRC Expert

Who is Forcepoint?

Forcepoint simplifies security for global businesses and governments. Forcepoint’s all-in-one, truly cloud-native platform makes it easy to adopt Zero Trust and prevent the theft or loss of sensitive data and intellectual property no matter where people are working. 20+ years in business. 2.7k employees. 150 countries. 11k+ customers. 300+ patents. If our mission excites you, you’re in the right place; we want you to bring your own energy to help us create a safer world. All we’re missing is you!

Job Title: Senior GRC Expert (Information Security) 

Position Type: Individual Contributor 
Reporting To: Director, Governance, Risk, and Compliance (GRC) 

Department: Information Security 

Location: Austin, Texas (in office 2x a week)

Role Overview 

The Senior GRC Expert is a key contributor within Forcepoint’s GRC team.  As part of the Information Security organization, this role is focused on ensuring alignment with compliance frameworks, regulatory requirements, industry standards, and internal security policies with a focus on enablement through scalable, automated, and audit-ready compliance operations. This role manages the team’s compliance program through preparation and leading security audits, developing and maintaining control design and automation, and partnering with cross-functional teams to sustain a strong security and governance and compliance posture in a cloud-based product environment. 

The ideal candidate brings strong technical and analytical skills, hands-on cloud security experience (preferably AWS), and a proven track record of successfully preparing for and managing audits (e.g., ISO and SOC2, Type 2). This role requires the ability to clearly communicate security requirements across technical and non-technical teams and to drive compliance through collaboration and influence. 

Key Responsibilities 

Governance & Compliance 

• Serve as the subject matter expert for information security compliance programs to support existing and new certifications, attestations, and self-assessment requests. 

• Plan and manage internal and external audits for ISO (27001, 27017, 27018, 27701), SOC 2. 

• Design, implement, and maintain security controls mapped to corporate policies and control frameworks (ISO, SOC 2, CIS, NIST 800-53, NIST CSF, ITGC, etc.). 

• Own daily administration of the GRC compliance platform, including control monitoring, evidence management, and audit workflows. 

• Partner with cross-functional teams to ensure controls are operating effectively and evidence is collected consistently. 

• Track, report, and present compliance metrics and Key Risk Indicators (KRIs) to leadership.