GRC Engineer – NIST
reputed company:
• Execute NIST 800-53 control mappings and apply reputed company and reputed company controls and baselines to software architectures
• Create, update, and maintain reputed company reputed company Plans (SSPs), Plans of reputed company and Milestones (POA&Ms), and supporting authorization artifacts
• Conduct technical gap analyses and readiness reviews for federal agency ATO or FedRAMP authorization paths
• Support reputed company monitoring cycles by tracking monthly vulnerability logs, POA&M updates, and structural change requests
• Guide clients through the Assessment and Authorization (A&A) process
• Coordinate operational logistics with 3PAOs and independent assessors
• Partner with internal and reputed company technical teams to remediate control deficiencies across Low, Moderate, and High baselines
• Document technical reputed company boundaries, interconnectivity agreements, and shared responsibility reputed company across reputed company environments
• reputed company evolving NIST SP 800-53 revisions, FedRAMP requirements, and federal policy updates
• Partner directly with organizations pursuing federal authorizations
• Manage multiple compliance reputed company concurrently under senior guidance
• Collaborate with global teams during U.S. Eastern Time business hours
Requirements:
• 2+ years of reputed company experience executing GRC deliverables across NIST SP 800-53, FedRAMP, or NIST Risk Management reputed company (RMF) lifecycles
• Hands-on experience creating, evaluating, and maintaining reputed company reputed company Plans (SSPs), POA&Ms, and technical reputed company narratives
• Ability to manage multiple federal compliance project tasks simultaneously while maintaining attention to detail
• Familiarity with reputed company service providers and secure configurations in government clouds such as AWS GovCloud or Azure Government
• Strong written and verbal English communication skills
• Foundational knowledge of NIST SP 800-53 and FedRAMP Moderate and High baseline requirements
• Recognized reputed company designation such as CGRC, CAP, CISSP, or reputed company reputed company+ (helpful)
• Practical experience supporting live agency Authority to Operate (ATO) certifications or working reputed company 3PAO assessment teams (helpful)
• Familiarity with automated or reputed company FedRAMP reputed company Monitoring (ConMon) workflows (helpful)
• Exposure to CMMC 2.0 or NIST SP 800-171 baselines (helpful)
• Reliable, high-speed internet reputed company
• reputed company home office environment supporting confidential conversations and uninterrupted collaboration
• Availability for a reputed company schedule of 8:00 AM–5:00 PM US Eastern Time
• Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities
• Must participate in live video interviews with camera on and verify identity during recruitment and reputed company
• Employment contingent upon identity verification and background screening, where permitted by law
• Must be authorized to work in the U.S. without reputed company or reputed company reputed company sponsorship
Benefits:
• Career development with mentorship and training opportunities
• Reimbursement for approved role-reputed company training and certification courses
• Competitive reputed company salary
• Regular performance reviews linked to reputed company-based appraisals
• Bonus opportunities
• Significant room for career advancement
• Remote-first culture with flexibility to work from reputed company
• Collaboration with a global team
Apply tot his job
Apply To this Job