Wind River

Senior Cybersecurity Risk & Compliance Associate

Senior Cybersecurity Risk & Compliance Associate at Wind River, Boston, MA. Lead ISO 27001/NIST 800-171 compliance. 5+ yrs GRC experience, SSP/POA&M expertise required. Hybrid role with comprehensive benefits.

ServiceNow Role Type:
ServiceNow Modules:
Department - JobBoardly X Webflow Template
Governance, Risk, and Compliance
ServiceNow Certifications (nice to have):

Job description

Date - JobBoardly X Webflow Template
Posted on:
 
December 12, 2025

Wind River is a global leader in delivering software for mission-critical intelligent systems. We're hiring a Senior Cybersecurity Risk & Compliance Associate to support and help lead the Wind River Risk & Compliance function, maintaining our ISO 27001 certification and supporting our obligations on NIST 800-171.

Requirements

  • 5+ years of cybersecurity, compliance, or GRC experience
  • Familiarity with ISO 27001, NIST 800-171, and enterprise GRC operations
  • Strong writing skills, with experience contributing to SSPs and POA&Ms
  • Working knowledge of ZenGRC or similar tools
  • Demonstrated ability to work across matrixed teams
  • Experience with customer audit responses and regulatory compliance
  • U.S. citizenship required due to regulatory requirements
  • Must be a local resident (or willing to relocate to) Alameda, CA or Boston, MA and agree to being on site three days per week in the office

Benefits

  • Hybrid work model for workplace flexibility
  • Comprehensive health, dental, and life insurance
  • Short and long-term disability coverage
  • RRSP matching for financial security
  • Flexible time-off policies for work-life balance
  • Employee assistance program for mental well-being
  • Learning benefits, including a LinkedIn Learning subscription and seminars

Requirements Summary

5+ years of experience in cybersecurity, compliance, or GRC, familiarity with ISO 27001 and NIST 800-171, strong writing skills, and experience with customer audit responses and regulatory compliance