Senior Staff Compliance Specialist

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk.

At TrendAI™, we’re always seeking exceptional talent; people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future.

AI Fearlessly.

About the Role:

The Senior / Staff Compliance Specialist leads FedRAMP High readiness and CMMC compliance activities, along with ongoing compliance work within the Global CISO Office’s GRC team. In this hands-on role, you will work with engineering, security, and IT teams to prepare for assessments, address control gaps, and keep compliance work on track.

Responsibilities

• Lead FedRAMP readiness reviews, identify control gaps, and agree on remediation priorities and deadlines with control owners.
• Maintain FedRAMP documentation and evidence so they reflect how security controls are implemented and who owns them.
• Coordinate the scope, schedule, and evidence requests for independent assessments. Work with control owners to resolve findings.
• Coordinate continuous monitoring, including control checks, vulnerability follow-up, and reporting.
• Review proposed system changes and advise teams on their impact on FedRAMP scope and controls.
• Track changes to FedRAMP requirements and explain what affected teams need to do.
• Manage milestones and dependencies across teams. Report progress and flag risks and decisions that need leadership attention.
• Use GRC tools and automation to improve evidence collection and reuse.
• Coordinate all FedRAMP and CMMC compliance activities, including scope, schedule, evidence, and assessment readiness.

Qualifications

Required

• Senior: 5+ years of experience in GRC, compliance, or audit. Staff: 8+ years of experience in GRC, compliance, or audit.
• Senior: 3+ years of hands-on FedRAMP experience, including FedRAMP High readiness or assessments. Staff: 5+ years of hands-on FedRAMP experience, including at least one FedRAMP High authorization or assessment, supporting independent assessments or continuous monitoring for a cloud service.
• Hands-on experience documenting and evaluating security controls, including NIST SP 800-53, and preparing evidence for external assessments.
• Working knowledge of cloud infrastructure, including networking, access control, and logging, sufficient to assess control implementation and discuss technical details with engineering teams.
• Experience with CMMC or NIST SP 800-171 requirements, alongside FedRAMP.
• Experience coordinating compliance work with technical teams and driving remediation through to closure.
• Ability to explain security requirements clearly to technical and business teams, and to influence outcomes without direct authority.

Preferred

• Hands-on experience with AWS, Azure, or GCP security configuration or services.
• Experience with ISO/IEC 27001 or SOC 2, particularly for mapping controls across frameworks.
• Experience automating control evidence with GRC tools, CI/CD pipelines, or infrastructure as code.
• Experience leading cross-functional workstreams and presenting to senior leaders.
• Relevant professional certifications, such as CISA, CISSP, CRISC, or Certified CMMC Profe

At Trend Micro, we embrace change, empower people, and encourage innovation in a connected world. Our diversity and multicultural workforce are key contributing factors to our success across the globe. Trend Micro provides equal employment opportunity for all applicants and employees. Trend Micro does not unlawfully discriminate on the basis of race, color, religion, sex, pregnancy and childbirth or related medical conditions, national origin, ancestry, age, physical or mental disability, medical condition, family care leave status, veteran status, marital status, sexual orientation, or gender identity.

Originally posted on Himalayas