Cybersecurity GRC Engineer

• Serve as a senior technical contributor to PDW’s cybersecurity governance, risk, and compliance program, helping define priorities, technical standards, control requirements, and roadmaps across enterprise IT, engineering, manufacturing, and business systems.
• Lead and support readiness efforts for applicable compliance frameworks and customer requirements, including CMMC, NIST SP 800-171, ISO 27001, ITAR and export-control obligations, and other defense-industry security requirements.
• Translate regulatory, contractual, and framework requirements into clear, actionable technical and administrative controls; partner with system owners to implement controls that are effective, sustainable, and appropriate for PDW’s operating environment.
• Own and continuously improve core GRC processes, including risk assessments, control assessments, system security plans, plans of action and milestones, evidence collection, policy and standard development, third-party risk, audit preparation, and remediation tracking.
• Remain hands-on in cybersecurity operations: configure, administer, tune, and validate security tooling such as endpoint detection and response, identity and access management, email security, logging, security monitoring, and related controls.
• Ensure standardized vulnerability-management processes are consistently followed across the organization, including asset coverage, scan cadence, remediation tracking, exception management, and evidence collection. Leverage platforms such as Tenable and related security tools to support compliance validation, audit evidence, risk reporting, and verification of remediation activities.
• Partner with IT and engineering teams to secure endpoints, identity systems, cloud services, networks, collaboration platforms, and business applications through practical configuration, hardening, monitoring, and access-control improvements.
• Support incident-response preparedness and execution, including developing playbooks, participating in investigations, coordinating technical response activities, documenting lessons learned, and improving controls after incidents.
• Develop meaningful cybersecurity and compliance metrics for leadership, including risk trends, control maturity, audit readiness, vulnerability remediation, security-tool coverage, and outstanding corrective actions.
• Work directly with internal stakeholders, external auditors, customers, assessors, and technology vendors to communicate PDW’s security posture, answer evidence requests, and drive timely resolution of findings.
• Build repeatable cybersecurity processes, technical baselines, policies, procedures, and evidence-collection mechanisms that enable PDW to scale while protecting sensitive, controlled, and export-controlled information., The physical demands described here are representative of those that must be met to successfully perform the essential functions of the job. Ability to sit, stand, bend, reach, climb, and move about regularly throughout the day and lift / carry up to 25 pounds. Must have manual dexterity to operate standard office or manufacturing equipment. Must be physically capable of occasionally assisting with the setup, movement, and installation of computer, networking, or security-related equipment.

Work Environment

PDW will consider remote, hybrid, or on-site work arrangements for the right candidate. This role requires the use of standard office and computing equipment and close cross-departmental collaboration with both independent and team-based responsibilities. Occasional travel between PDW sites, partner locations, industry events, or other business locations may be required. Standard work hours are PDW’s core business hours, with availability outside those hours as needed for significant cybersecurity incidents or operational priorities.

• 7+ years of progressive experience in cybersecurity, information security, GRC, security engineering, IT security, or a related technical discipline, including meaningful hands-on experience operating cybersecurity controls and tools.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline; equivalent relevant professional experience, technical training, and industry certifications will be considered in lieu of a degree.
• Demonstrated experience implementing or assessing security programs against CMMC and/or NIST SP 800-171, including familiarity with assessment, evidence, and remediation expectations associated with defense-industry cybersecurity requirements.
• Working knowledge of ISO 27001 and experience applying its control-based approach to a real-world information security management system.
• Experience working in an environment subject to ITAR, export controls, controlled unclassified information, defense contracts, or similarly regulated and sensitive data environments.
• Hands-on experience administering, configuring, or validating security tools such as EDR, endpoint-management tools, identity and access-management systems, SIEM and logging platforms, email-security tools, or cloud-security controls.
• Familiarity with vulnerability-management platforms such as Tenable, Qualys, or Rapid7, including using scan results and platform reporting to gather compliance evidence, support risk assessments, validate control effectiveness, and track remediation.
• Demonstrated ability to investigate technical issues, assess security configurations, validate control effectiveness, identify gaps, and work directly with system owners to remediate risk.
• Experience developing and maintaining cybersecurity documentation, including system security plans, risk registers, policies, procedures, control narratives, audit evidence, and remediation plans.
• Strong understanding of endpoint security, vulnerability management, identity and access management, least privilege, network security, logging and monitoring, incident response, encryption, asset management, and secure configuration.
• Ability to independently translate ambiguous compliance or security requirements into pragmatic action plans; prioritize risk; communicate effectively with technical and non-technical stakeholders; and drive work through completion.
• Must have the ability to obtain and maintain a U.S. Security Clearance.

Preferred

• Relevant certifications such as CISSP, CISM, CRISC, CISA, Security+, ISO 27001 Lead Implementer or Lead Auditor, Certified CMMC Professional, Certified CMMC Assessor, or similar credentials.
• Experience supporting a CMMC assessment, ISO 27001 certification audit, NIST SP 800-171 assessment, customer security review, or government-contracting security evaluation.
• Experience in aerospace, defense, robotics, manufacturing, or another highly technical and regulated environment.
• Experience with Microsoft 365 and Azure security, Microsoft Defender, CrowdStrike, SentinelOne, Tenable, Jira, ServiceNow, SIEM platforms, or comparable technologies.
• Experience building cybersecurity programs in a fast-growing organization where controls, systems, and processes are evolving rapidly.

Build and mature PDW’s cybersecurity GRC program across enterprise, engineering, manufacturing, and business systems. Translate CMMC, NIST SP 800-171, ISO 27001, ITAR, and customer requirements into controls; manage risk assessments, documentation, evidence, audits, remediation, vulnerability management, and third-party risk. Configure and validate security tools, support incident response, improve endpoint, identity, cloud, network, and monitoring controls, and report security metrics to leadership. The role requires cross-functional collaboration with auditors, customers, vendors, and system owners. The summary above was generated by AI

Performance Drone Works (PDW) is building the next generation of tactical robotic systems used across defense, national security, and public safety missions. We are building a new center of engineering excellence to design our new category of tactical robotic systems and the industrial capacity to deliver them, bringing decisive airpower into the hands of every operator. We are not here to make promises; we are here to deliver real systems with real capabilities for real missions. You will join a team of operators, engineers, and builders who solve hard problems with humility and focus. We design and produce multi-mission aerial systems that operators trust to perform in real-world conditions, reliably, repeatedly, and at scale. Our approach is grounded in operator-centered design, rapid iteration from field use, and U.S.-based manufacturing. We operate by a clear set of values: Mission First, Aim Farther, Own It, Win Together. This is how we build advantage and how we help protect our service members, our communities, and our country., PDW values our team, and we offer a compensation package reflective of your experience and capabilities. Benefits include:

• Comprehensive BCBS medical, dental, and vision coverage; 80% sponsored by the company.
• Safe Harbor 401(K) with company match.
• Paid Parental Leave.
• On-site gym at our Denver, CO & Huntsville, AL locations.
• Employer provided life insurance.
• Robust Employee Assistance Program (EAP).
• A work environment that encourages teamwork and innovation.
• Competitive salary, generous paid time off (PTO), and flexible leave options., Remote or Hybrid United States 156K-210K Annually Expert/Leader 156K-210K Annually Expert/Leader Cloud * Fintech * Software * Business Intelligence * Consulting * Financial Services Leads enterprise billing, accounts receivable, collections, and Finance components of Lead-to-Cash transformation. The role designs scalable operating models, improves billing quality, realization, collections, DSO, cash conversion, reporting, controls, and automation. It manages onshore and offshore teams, partners with Finance, Operations, Technology, ERP, and business leaders, oversees process redesign and vendor implementations, establishes performance governance, and develops talent and service standards. Top Skills: Ai-Enabled CapabilitiesDashboardsData IntegrationsErp SystemsWorkday Financial ManagementWorkflow Automation Wipfli, Remote or Hybrid United States 80K-108K Annually Senior level 80K-108K Annually Senior level Cloud * Fintech * Software * Business Intelligence * Consulting * Financial Services Supports revenue forecasting, budgeting, financial modeling, variance analysis, and recurring reporting across utilization, realization, WIP, AR, margins, backlog, and staffing metrics. Partners with accounting, billing, and business teams on close processes, M&A integration, reporting controls, dashboards, and revenue performance insights. Provides recommendations to finance and business leaders to improve planning, identify revenue leakage, and manage cash conversion risks. Top Skills: Excel Boeing

Facilities Operations & Maintenance Manager

3 Hours Ago In-Office Aurora, CO, USA 128K-158K Annually Senior level 128K-158K Annually Senior level Aerospace * Information Technology * Software * Cybersecurity * Design * Defense * Manufacturing Manages on-site facilities operations and maintenance for mission-essential facilities. Leads 24/7 multi-trade teams, oversees large-scale mechanical and electrical systems, preventive maintenance, critical spares, commissioning, safety, compliance, SOPs, emergency response, and KPI reporting. Communicates facility status, event summaries, and remediation plans to government stakeholders while supporting continuous, safe, and compliant operations. Top Skills: AshraeBoilersChilled Water PlantsCritical Spares InventoryHvacInfrared ThermographyNfpaOil AnalysisOshaPower Generation SystemsPreventative MaintenancePumpsSwitchgearUpsVibration Analysis

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

• Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
• Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
• Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
• Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
• Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute