BETA Technologies
Senior Governance, Risk & Compliance Analyst, Information Security
South Burlington, Vermont, United States · Senior · Contract
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →H-1B wage level
the lottery is wage-weighted — each level is one more entry
The bottom of this range ($53,000) is below the Level I prevailing wage of $79,581. An H-1B cannot be filed below the prevailing wage, so an offer at the floor of this band could not be sponsored as posted.
Based on the DOL prevailing wage for this occupation and worksite, a base salary of $97,240 would place this position at wage Level II. That figure is within the posted range, and I'd like to target it. This role classifies under "Information Security Analysts" for prevailing-wage purposes.
DOL prevailing wage, 2026-27 wage year · Information Security Analysts (15-1212) · Burlington-South Burlington, VT. Wage level is derived by USCIS from the offered wage, occupation and worksite; the occupation shown is inferred from the job title.
Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Regardless of the position one holds, each team member brings their talent and desire to positively impact the environment and lives of others in a refreshing, vibrant, and inclusive culture.
- This is a hands-on, high-impact role for a GRC professional who thrives in a fast-paced, innovative environment where aviation safety, cybersecurity, and regulatory compliance intersect.
Responsibilities
- Build electric airplanes with us!
Requirements
- 7+ years of hands-on GRC experience, with at least 5 years focused on information security risk and compliance
- Experience managing external audits and assessments (SOC 2, ISO certifications, CMMC assessments) and associated internal preparation
- Deep working knowledge of NIST CSF, NIST 800-53, NIST 800-171, ISO 27001/27002, and risk management methodologies
- Direct experience with compliance frameworks applicable to defense contractors (NISPOM, DFARS, ITAR/EAR, CUI protection)
- Proven track record conducting enterprise risk assessments, threat modeling, and risk quantification
- Experience creating security policies, standards, procedures, and control documentation
- ability to translate technical risk to business stakeholders
- Proficiency with GRC platforms (Vanta, Upguard, etc.) and common collaboration tools (Slack, Jira, Confluence, etc.)
- Experience working in the Defense and Aerospace industry
- Experience implementing or administering GRC platforms and integrated risk management tools
- One or more professional certifications, such as CRISC, CISSP, CISA, CISM, or ISO 27001 Lead Auditor
- Understanding of information technology and operational technology/industrial control systems security in manufacturing environments
- Track record of building GRC programs from the ground up or through significant maturity transitions
- The wage listed here reflects our best faith estimate for this role.
- We pay competitively and base compensation on a variety of factors including skills, experience, industry background, and the evolving needs of the role.
- We remain committed to fair and equitable pay and we're happy to discuss during the interview process.
Skills
- How you will contribute to revolutionizing electric aviation:
- Coordinate internal and external audits, assessments, and certifications (SOC 2, ISO 27001, CMMC, etc.)
- Conduct comprehensive risk assessments across IT systems, operational technology (OT), and critical business processes
- Translate complex regulatory requirements into actionable control requirements for technical and operational teams
- Monitor regulatory landscape for emerging compliance obligations relevant to electric aviation and defense contracting
- Support control testing and validation activities
- Work across departments including InfoSec, IT, Engineering, Manufacturing, Quality, Legal, and Program Management to embed GRC practices
Compensation
- $130,000 - $150,000 USD
- BETA offers a competitive Total Compensation package designed to support you now and as you grow with us.
Benefits
- This role includes both Restricted Stock Units and Performance Stock Units for all full-time team members, so everyone shares in our success.
- We also take care of the everyday details with daily lunch provided, and yes-flight lessons are part of the experience, along with a range of additional perks that make work here genuinely rewarding.
- You'll have access to onsite healthcare in Vermont, comprehensive medical coverage, dental and vision, short- and long-term disability, and paid parental leave.
Company info
- At BETA Technologies, we apply our intellectual curiosity, passion for aviation, and commitment to sustainability toward a shared mission of revolutionizing electric aviation.
- You'll help shape the GRC and information security culture at BETA as we rapidly scale.
Equal opportunity
- We are an equal opportunity employer.
Visa & Work Authorization
- enced in any manner on race, color, religion, age, sex, sexual orientation, gender identity, national origin, ancestry, citizenship, disability, veteran or military status, genetic information, pregnancy, or any other pr
This listing is sourced directly from BETA Technologies's careers page and normalized into a canonical job model.