Who is Trace3 ?
Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.
Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!
Trace3 is headquartered in Irvine, California. We employ more than 1,200 people all over the United States. Our major field office locations include Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Francisco.
Ready to discover the possibilities that live in technology?
Come Join Us!
Street-Smart - Thriving in Dynamic Times
We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.
Juice - The “Stuff” it takes to be a Needle Mover
We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.
Teamwork - Humble, Hungry and Smart
We are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures – not just their success. We appreciate the individuality of the people around us.
JOB SUMMARY:
The Architect, Governance, Risk & Compliance (GRC) is a senior, delivery-focused consultant responsible for leading and executing GRC engagements for Trace3 clients. This role performs framework-based security program assessments, risk assessments, and business impact analyses, and translates findings into practical, prioritized roadmaps that help clients build resilient, scalable, and compliant security programs. The Architect works directly with CISOs, risk and compliance leaders, control owners, and technical teams from engagement kickoff through final executive readout.
The GRC Architect will also help clients establish governance over the use of artificial intelligence, aligning AI adoption with emerging frameworks, regulations, and internal risk tolerance. This is a delivery role: the Architect is accountable for engagement quality, on-time completion of deliverables, and client satisfaction. A key function of this role will be to build deep relationships, gain trust, and enable client success.
SUMMARY OF ESSENTIAL JOB FUNCTIONS:
Lead and execute GRC engagements end-to-end, including kickoff, stakeholder interviews, documentation and evidence review, analysis, deliverable development, and executive readouts.
Perform security program maturity assessments against the NIST Cybersecurity Framework (CSF 2.0) and related frameworks such as NIST SP 800-53, ISO 27001, and CIS Critical Security Controls, as appropriate to the client environment.
Conduct gap and readiness assessments against regulatory and compliance requirements, including PCI DSS, HIPAA, SOC 2, GLBA, FFIEC, SOX, CMMC, and GDPR.
Perform IT and cyber risk assessments, including risk identification, analysis, and rating, and develop risk registers and risk treatment plans aligned to methodologies such as NIST SP 800-30 and ISO 27005.
Conduct Business Impact Analyses (BIA) to identify critical business processes, dependencies, and supporting technology; establish recovery objectives (RTO, RPO, MTD);…