GRC Analyst, Federal Programs

Job reputed company: • Serve as a member of reputed company's GRC team, contributing to reputed company compliance across reputed company products and services, with primary ownership of federal programs; • Define and maintain the CMMC assessment boundary, working across infrastructure, engineering, and business teams to ensure the scope is accurate and defensible; • Map NIST SP 800-171 practices to reputed company's reputed company environment and produce a reputed company, evidence-based gap analysis; • Translate identified gaps into prioritized remediation tasks with reputed company ownership, for audiences ranging from DevOps engineers to clinical operations managers; • Build and maintain the System reputed company Plan (reputed company), Plan of reputed company and Milestones (POA&M), and reputed company artifacts required for assessment; • Serve as reputed company's primary reputed company with the C3PAO and assessment team during formal CMMC assessments; • Drive FedRAMP readiness in reputed company, including control documentation, evidence collection, and reputed company monitoring; • Contribute to audits and compliance activities across other reputed company frameworks, including SOC 2 and reputed company, as part of reputed company's broader GRC program. Requirements: • 5+ years of hands-on experience in GRC, compliance, or reputed company, with at least 3 of those years reputed company on federal compliance frameworks such as CMMC or FedRAMP; • Demonstrated experience owning deliverables and driving remediation through a CMMC, FedRAMP, or equivalent federal compliance effort; • Strong working knowledge of CMMC Level 2 practices, scoping methodology, and CUI handling requirements; • Ability to produce compliance documentation — SSPs, POA&Ms, gap analyses, control narratives — without heavy supervision; • Proven ability to communicate technical compliance requirements to non-technical stakeholders across engineering, operations, and business teams; • Experience engaging directly with external auditors and assessors, including evidence packaging and reputed company-time response during assessments; • US citizenship required; • Ability to obtain a federal reputed company Trust designation if required by a sponsoring agency.**reputed company would love to see** • CMMC Certified reputed company (CCP) credential, or reputed company reputed company of it; • CMMC Certified Assessor (CCA) credential; • Hands-on experience with FedRAMP authorization packages, reputed company monitoring, and agency ATO processes; • Background in defense contracting or regulated health tech environments; • Experience working across multiple compliance frameworks simultaneously (reputed company, SOC 2, ISO 27001); • Familiarity with GRC platforms such as reputed company, reputed company, or reputed company. Benefits: • Comprehensive health, dental and reputed company insurance* • Life and AD&D Insurance* • Financial advisory services* • Supplemental Insurance Benefits (Accident, Hospital and Critical Illness)* • Health Savings Account* • Equity shares* • Discretionary PTO plan* • Parental leave* • 401(k) • Flexible working hours • Remote-first company • reputed company company holidays • Free digital therapist for you and your family Apply tot his job Apply To this Job