At Mechanical Orchard, we specialize in safely rewriting the most critical and complex business applications—the software that runs the world as we know it today—so they’re ready to adapt quickly and easily to market challenges and opportunities. Our approach emerged from observing the decades-long failure patterns in modernization efforts and is designed to eliminate the risks and disruptions that characterize most projects. Our background in software development and the impact on the industry is well known: we've literally helped write the book on XP and other impactful Agile practices. We’re applying the same thoughtfulness and rigor in applying AI pragmatically where it helps. We believe in the durable principles behind Agile, and embrace the power of cross-functional teams, collective ownership, test driven development, short feedback loops, and continuous improvement. We’re bringing joy to beleaguered IT teams everywhere. Together, we’re seeing how applying craft, expertise, and technologies we’re building can fundamentally transform the way companies operate, innovate, and win. Our values are: Do the right thing. Do what works. Be kind. Mechanical Orchard is looking for a hands-on GRC expert to take our compliance portfolio to the next level. You will maintain and strengthen our existing compliance programs covering SOC 2, ISO 27001, GDPR, and CPRA, and lead the pursuit of new compliance requirements, certifications, and authorizations, including US federal and DoW compliance: CMMC, NIST SP 800-171, and agency-specific ATOs.