Beta Technologies

Electric aircraft maker and charging infrastructure

Senior Governance, Risk, and Compliance Analyst - Information Security

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeSouth Burlington, VT, USAIn-person

About the Job

Requirements

At least 7 years of hands-on GRC experience, including at least 5 years focused on information security risk and compliance.
Experience managing external audits and assessments, including SOC 2, ISO certifications, and CMMC assessments, and the associated internal preparation.
Working knowledge of NIST CSF, NIST 800-53, NIST 800-171, ISO 27001/27002, and risk management methodologies.
Direct experience with defense-contractor compliance frameworks, including NISPOM, DFARS, ITAR/EAR, and CUI protection.
A track record of conducting enterprise risk assessments, threat modeling, and risk quantification.
Experience creating security policies, standards, procedures, and control documentation.
Ability to translate technical risk to business stakeholders through written and verbal communication.
Ability to influence without authority and build cross-functional relationships.
Proficiency with GRC platforms such as Vanta and UpGuard, and collaboration tools such as Slack, Jira, and Confluence.

Responsibilities

Design, implement, and mature GRC frameworks aligned with NIST CSF, ISO 27001, and CMMC.
Coordinate internal and external audits, assessments, and certifications, including SOC 2, ISO 27001, and CMMC.
Build Information Security GRC capabilities, including risk assessments, policy development, compliance management, and security control implementation.
Develop scalable GRC processes, templates, and tools that can be adapted across the enterprise as the program expands.
Conduct risk assessments across IT systems, operational technology, and critical business processes.
Develop risk treatment plans and monitor remediation activities through closure.
Translate regulatory requirements into actionable control requirements for technical and operational teams.
Monitor regulatory developments for emerging compliance obligations relevant to electric aviation and defense contracting.
Support control testing and validation activities.
Conduct vendor security assessments and due diligence reviews, manage vendor compliance documentation, and monitor ongoing vendor risk.
Work across Information Security, IT, Engineering, Manufacturing, Quality, Legal, and Program Management to embed GRC practices.
Drive continuous improvement of GRC processes based on lessons learned and industry best practices.

Desired Qualifications

One or more professional certifications, such as CRISC, CISSP, CISA, CISM, or ISO 27001 Lead Auditor.
Experience in the defense and aerospace industry.
Understanding of information technology and operational technology/industrial control systems security in manufacturing environments.
Experience implementing or administering GRC platforms and integrated risk management tools.
A track record of building GRC programs from the ground up or through significant maturity transitions.
Familiarity with privacy regulations such as GDPR and CCPA, and data protection frameworks.

At BETA Technologies, we apply our intellectual curiosity, passion for aviation, and commitment to sustainability toward a shared mission of revolutionizing electric aviation. Regardless of the position one holds, each team member brings their talent and desire to positively impact the environment and lives of others in a refreshing, vibrant, and inclusive culture.

BETA Technologies is seeking an experienced Senior Governance, Risk, and Compliance (GRC) Analyst to serve as a strategic partner in building and maturing our GRC program. This role will initially focus on establishing robust GRC capabilities within our Information Security group, then expand the program across our broader enterprise operations, including aerospace engineering, manufacturing, supply chain, and defense programs.

This is a hands-on, high-impact role for a GRC professional who thrives in a fast-paced, innovative environment where aviation safety, cybersecurity, and regulatory compliance intersect. You'll help shape the GRC and information security culture at BETA as we rapidly scale.

How you will contribute to revolutionizing electric aviation:

•Design, implement, and mature GRC frameworks aligned with industry standards (NIST CSF, ISO 27001, CMMC)
•Coordinate internal and external audits, assessments, and certifications (SOC 2, ISO 27001, CMMC, etc.)
•Lead the buildout of InfoSec GRC capabilities including risk assessments, policy development, compliance management, and security control implementation
•Develop scalable GRC processes, templates, and tools that can be adapted enterprise-wide as the program expands
•Conduct comprehensive risk assessments across IT systems, operational technology (OT), and critical business processes
•Develop risk treatment plans and monitor remediation activities to closure
•Translate complex regulatory requirements into actionable control requirements for technical and operational teams
•Monitor regulatory landscape for emerging compliance obligations relevant to electric aviation and defense contracting
•Support control testing and validation activities
•Conduct vendor security assessments/due diligence reviews and manage vendor compliance documentation and ongoing risk monitoring
•Work across departments including InfoSec, IT, Engineering, Manufacturing, Quality, Legal, and Program Management to embed GRC practices
•Drive continuous improvement of GRC processes based on lessons learned and industry best practices

Minimum Qualifications:

•7+ years of hands-on GRC experience, with at least 5 years focused on information security risk and compliance
•Experience managing external audits and assessments (SOC 2, ISO certifications, CMMC assessments) and associated internal preparation
•Deep working knowledge of NIST CSF, NIST 800-53, NIST 800-171, ISO 27001/27002, and risk management methodologies
•Direct experience with compliance frameworks applicable to defense contractors (NISPOM, DFARS, ITAR/EAR, CUI protection)
•Proven track record conducting enterprise risk assessments, threat modeling, and risk quantification
•Experience creating security policies, standards, procedures, and control documentation
•Excellent written and verbal communication skills; ability to translate technical risk to business stakeholders
•Demonstrated ability to influence without authority and build strong cross-functional relationships
•Proficiency with GRC platforms (Vanta, Upguard, etc.) and common collaboration tools (Slack, Jira, Confluence, etc.)

Above and Beyond Qualifications:

•One or more professional certifications, such as CRISC, CISSP, CISA, CISM, or ISO 27001 Lead Auditor
•Experience working in the Defense and Aerospace industry
•Understanding of information technology and operational technology/industrial control systems security in manufacturing environments
•Experience implementing or administering GRC platforms and integrated risk management tools
•Track record of building GRC programs from the ground up or through significant maturity transitions
•Familiarity with privacy regulations (GDPR, CCPA) and data protection frameworks

The wage listed here reflects our best faith estimate for this role. We pay competitively and base compensation on a variety of factors including skills, experience, industry background, and the evolving needs of the role. We remain committed to fair and equitable pay and we're happy to discuss during the interview process.

Compensation

$130,000—$150,000 USD

Build electric airplanes with us!

BETA offers a competitive Total Compensation package designed to support you now and as you grow with us. This role includes both Restricted Stock Units and Performance Stock Units for all full-time team members, so everyone shares in our success. You’ll have access to onsite healthcare in Vermont, comprehensive medical coverage, dental and vision, short- and long-term disability, and paid parental leave. We also take care of the everyday details with daily lunch provided, and yes—flight lessons are part of the experience, along with a range of additional perks that make work here genuinely rewarding.

We encourage all driven candidates to apply, even if they do not meet every listed qualification.

We are an equal opportunity employer. Employment decisions are based on merit, competence and qualifications and will not be influenced in any manner on race, color, religion, age, sex, sexual orientation, gender identity, national origin, ancestry, citizenship, disability, veteran or military status, genetic information, pregnancy, or any other protected characteristic under federal, state, or local law. BETA complies with all applicable federal, state and local non-discrimination laws and does not tolerate discrimination of any kind in our workplace.

Employment offers are contingent upon the successful completion of a background check. BETA Technologies participates in E-Verify.

Compensation 130000 - 150000 USD

About the Company

Beta Technologies

Electric aircraft maker and charging infrastructure

BETA Technologies develops electric vertical take-off and landing (eVTOL) aircraft and the charging infrastructure to support them. Its eVTOLs can be used for both passenger and cargo transport, and the company also installs and maintains the required charging systems. The revenue model includes selling aircraft, providing charging infrastructure installation and maintenance, and offering pilot and maintainer training. The company differentiates itself by delivering an integrated solution: both the aircraft and the accompanying charging network, plus ongoing services, to help clients shift to electric flight. Its goal is to move air travel toward greener, safer, and more efficient operations by enabling sustainable, scalable electric aviation for commercial airlines, logistics providers, and other organizations.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: South Burlington, VT
Founded: 2017

Recently Posted Jobs

Explore more opportunities at Beta Technologies

See more jobs