Role Description We are looking for a Principal GRC Architect who can solve a unique challenge: How do we maintain "gold-standard" security certifications without killing our "ship-fast" culture? We are already under continuous observation for SOC 2 Type II and are GDPR compliant. We are now ready to evolve toward the most rigorous standards in the industry: TISAX, ITAR, and FedRAMP. This is a hands-on, individual contributor role. You will be the architect of the system and the person turning the gears, designing the roadmap and then personally implementing the controls. Your mission is to reconcile the rigidity of international standards with the agility of a fast-paced software company. You aren't here to create bureaucracy; you’re here to engineer compliance directly into our AWS infrastructure. Core Responsibilities - Maintain Continuous Observation: Uphold our SOC 2 Type II standard using automated monitoring to ensure compliance is a constant state, not an annual event. - Technical Infrastructure Strategy: Directly satisfy the high-bar technical requirements of ITAR and FedRAMP. This includes managing the transition to/oversight of AWS GovCloud, defining network security boundaries, and ensuring encryption and IAM standards meet federal requirements. - Bridge the "Speed vs. Standard" Gap: Act as a technical enabler for the Engineering team, designing and implementing controls (e.g., change management, access reviews) that satisfy auditors but don’t bottleneck our Engineering or DevOps teams. - Lead Global Expansion: Architect and execute the technical and procedural implementation of TISAX, ITAR, and FedRAMP. - GDPR Stewardship: Act as the internal authority on privacy, ensuring our data mapping and PIAs remain current without adding unnecessary friction. - Customer Trust & Sales Support: Join calls with customer Infosec counterparts and handle technical vendor questionnaires to prove our security posture can be trusted by the world’s most demanding organizations. - Individual Contributor Ownership: Act as a "department of one". You will write the policies, perform the risk assessments, and manage the audits yourself. Qualifications - Technical AWS Depth: You understand how to configure AWS beyond simple evidence collection. You are familiar with GovCloud, VPC isolation, network security, and IAM architecture. - Standard Mastery: Expert-level knowledge in at least two of: TISAX, ITAR, or FedRAMP. You have previously led a company through these audits or were responsible for maintaining their compliance. - Privacy & AI Knowledge: A deep, working knowledge of GDPR and an active interest in the evolving landscape of AI regulation. - The "Translator" Skillset: You can translate rigid regulatory requirements into actionable technical tasks that make sense to a developer. - Independence: You are energized by "getting your hands dirty" and owning the full lifecycle of a program without a team to delegate to. - Communication: Exceptional English skills; able to negotiate effectively with both internal engineers and external auditors. Benefits - A direct seat at the table: full ownership of the compliance and GRC roadmap. - Your work directly enables our largest enterprise and government deals: measurable, visible business impact. - Enjoy flexible hours and the freedom to work remotely from anywhere in the world. - Access comprehensive health coverage, retirement plans, paid time off, and wellness support. - Stay active with subsidized gym memberships, sports meetups, and wellness programs. - Grow as a professional with online/offline learning, language courses, and tech talks. - Connect at team events, join support groups, and contribute to our ESG and DE&I initiatives. - Participate in fun team challenges and competitions for added excitement and team spirit. - Multicultural team (35+ nationalities), flexible work, relocation and visa support where applicable. Company Description SimScale - revolutionising the way engineers design and validate their products.

• Assisting in the management of the lifecycle of controlled documents in Qualio (our QMS system), driving authors to meet review and approval deadlines. • Support standard operational procedures, work instructions, medical device technical documents and template drafting. • Assign training and track completion for document updates. • Help organise internal quality records, logs and dashboards. • Support with internal and external audits against ISO 13485 and ISO/IEC 27001 standards. • Support Corrective and Preventative Actions (CAPAs), Non-Conformances (NC), change controls and follow up actions, including timely and structured root cause analysis (e.g. 5 whys, fishbone) and tracking effectiveness. • Drive audit readiness by maintaining organised evidence logs aligned to ISO 13485 and ISO 27001 requirements and contributing to ongoing quality assurance activities. • Coordinate the collection of Post-Market Surveillance (PMS) inputs. • Support risk register updates and Design History Files. • Contribute to Management Review quality reporting. • Support with Supplier Onboarding, Supplier Evaluation Reports and ongoing supplier monitoring. • Conduct quality checks on our medical device components and logistics providers, escalating non conformances independently.

Role Description - Manage and coordinate the credentialing process for healthcare providers, ensuring the timely submission and approval of all required documentation. - Verify professional credentials, licenses, certifications, and education records accurately. - Maintain up-to-date provider credentialing files and databases. - Communicate with healthcare providers, insurance companies, and relevant regulatory bodies to resolve credentialing issues. - Track renewal deadlines and ensure all recredentialing processes are completed on time. - Support compliance efforts by preparing documentation for audits and quality assurance. - Collaborate with internal teams to facilitate smooth onboarding and credentialing of new providers. Qualifications - Associate's degree or higher in healthcare administration or a related field preferred. - Previous experience in credentialing or a related administrative role within healthcare. - Strong knowledge of healthcare regulations, credentialing standards, and insurance requirements. - Excellent organizational skills with strong attention to detail and ability to manage multiple tasks. - Proficient in Microsoft Office, Google Workspace, and credentialing software. - Effective verbal and written communication skills. - Ability to work effectively in a remote environment with minimal supervision. - Comfortable working U.S. hours. Requirements - Remote work from home. Company Description - Fraud Disclaimer: ReWorks Solutions will never request payment during recruitment or require in-person office visits. - All official communication will come from a ReWorks Solutions email address. - Please verify any suspicious messages with our team directly.

• Researching and supporting complex utility damage claims. • Handling regulatory inquiries and compliance investigations. • Auditing damage investigations and performing root cause analysis. • Responding to regulatory compliance inquiries. • Developing defensible documentation for claims. • Collaborating with operations, customers, regulatory agencies, utility owners, contractors, and industry organizations.