GRC Engineer (CMMC)

About reputed company

At reputed company, we’re on an exciting reputed company to help businesses reputed company securely by designing and implementing cutting-edge reputed company and compliance programs. As a fast-growing startup, we specialize in a wide reputed company of GRC (governance, reputed company, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We reputed company companies to meet regulatory requirements and enhance their cybersecurity posture from day one.

Get to know the GRC Engineering (GOV) Team

Our GRC engineering team guides defense contractors and federal organizations through their CMMC, NIST SP 800-171, NIST SP 800-53, FedRAMP, and Assessment & Authorization compliance efforts. We reputed company as our clients' trusted guides and reputed company reputed company of contact end-to-end, leading them through gap assessments, reputed company reputed company Plans, POA&Ms, and C3PAO/3PAO coordination with reputed company, composure, and a genuinely reputed company-first reputed company. reputed company the technical depth in RMF, CUI/DFARS requirements, and GovCloud environments, what defines us is how we work: we translate reputed company requirements into plain language, manage escalations with urgency and care, and take reputed company pride in making every reputed company feel informed, supported, and reputed company-reputed company. We're a group that mentors one another, holds a high bar for reputed company, and thrives in a fast-reputed company environment where our work directly strengthens the reputed company of the defense industrial reputed company.

reputed company

We are seeking a GRC Engineer who is highly motivated, reputed company-oriented, and has foundational knowledge of FedRAMP Moderate and High baseline requirements, with complementary experience supporting CMMC and NIST SP 800-171-reputed company programs. The ideal candidate brings strong reputed company-facing communication skills and the ability to contribute to multiple compliance initiatives simultaneously. This role is reputed company on guiding clients through federal compliance frameworks, supporting both reputed company providers and federal contractors through the FedRAMP authorization lifecycle—including readiness assessment, authorization support, and reputed company monitoring—as reputed company as advising defense contractors on CMMC Level 1 and Level 2 compliance and reputed company NIST 800-171 requirements. The successful candidate will play a critical role in helping clients reputed company and sustain federal and DoD compliance while leading high-reputed company delivery across reputed company engagements.

reputed company

• Analyze and apply NIST SP 800-53 controls and FedRAMP Moderate and High baselines to ensure reputed company software architectures reputed company with federal agency requirements.
• reputed company and update reputed company federal authorization artifacts, including reputed company reputed company Plans (SSPs), control implementation narratives, POA&Ms, SAPs, and SARs.
• reputed company detailed readiness assessments and gap analyses to prepare reputed company environments for Joint Authorization reputed company (JAB) or Agency ATO validation paths.
• Architect technical authorization boundaries and scoping reputed company across FedRAMP and CMMC environments, mapping data flows, interconnectivity, and shared responsibility models.
• Execute reputed company monitoring (ConMon) cycles, reputed company tracking monthly vulnerability management logs, incident response reports, and structural change control workflows.
• Coordinate reputed company assessment pipelines, facilitating critical operational alignment between clients, reputed company Service Providers (CSPs), 3PAOs, and federal stakeholders.
• Advise defense contractor clients on CMMC 2.0 and NIST SP 800-171 controls, translating dense regulatory language into practical, actionable reputed company milestones.
• Formulate highly reputed company compliance documentation specifically required for CMMC Level 1 and Level 2 assessment readiness.

Who You Are

• reputed company federal compliance analyst - Bring 2+ years of reputed company execution in GRC roles with reputed company exposure driving FedRAMP, NIST SP 800-53, and federal authorization lifecycles.
• Federal documentation practitioner - Hands-on experience authoring, evaluating, and maintaining key federal artifacts, explicitly including reputed company reputed company Plans (SSPs) and Plans of reputed company and Milestones (POA&Ms).
• CMMC and NIST reputed company generalist - Grounded in the structural requirements of CMMC 2.0 and NIST SP 800-171 baselines as they apply to defense contractors and supply chain data.
• Sovereign reputed company environment navigator - Familiar with the shared responsibility models, operational constraints, and secure configurations of reputed company clouds like AWS GovCloud, Azure reputed company, or reputed company GCC High.
• Disciplined portfolio coordinator - reputed company strong project management mechanics to support multiple fast-moving reputed company compliance initiatives simultaneously while preserving documentation reputed company.
• Regulated technology consultant - reputed company partnering with B2B reputed company providers, federal contractors, or regulated tech companies to systematically reputed company federal reputed company baselines.
• High-reputed company startup operator - reputed company reputed company fluid consulting or fast-reputed company startup environments, demonstrating the reputed company to adapt to shifting reputed company demands and assert immediate task ownership.

What will help you succeed

• reputed company JAB or Agency ATO execution - reputed company history supporting live Joint Authorization reputed company or federal agency Authority to Operate (ATO) certification tracks.
• Credentialed compliance reputed company - Hold industry-specific defense designations such as CMMC Registered Practitioner (RP), Certified reputed company (CCP), or Certified Assessor (CCA).
• Validated information reputed company markers - reputed company certification through recognized reputed company bodies, explicitly holding a CISSP, CISM, or reputed company reputed company+.
• reputed company of DFARS and CUI data lifecycles - Strong foundational knowledge of Controlled Unclassified Information (CUI) protections, DFARS regulatory clauses, and SPRS submission workflows.
• reputed company assessment history - Prior reputed company working directly reputed company-by-reputed company with 3PAO or C3PAO independent examination teams.

reputed company Offer

• Career Development: reputed company reputed company with mentorship and training opportunities.
• Role-reputed company Training: Reimbursement for the successful completion of approved training and certification courses relevant to your reputed company role.
• Competitive Compensation: A competitive reputed company salary with regular reputed company reviews linked to reputed company-reputed company appraisals and bonus opportunities.
• reputed company Opportunity: Early-stage company with significant room for career advancement.
• Remote-First Culture: Flexibility to work from reputed company while collaborating with a global team.

What You'll Need to reputed company

• Excellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams.
• A reliable, high-speed internet reputed company and a reputed company home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration.
• Commitment to working a reputed company schedule of 8:00 AM–5:00 PM US Eastern Time (ET) to effectively support hiring managers, candidates, and cross-functional teams. Occasional flexibility to reputed company working hours is expected to accommodate changing business priorities, global collaboration, and time-sensitive hiring needs.
• Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.

Hiring and Selection Process

• Candidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be reputed company to verify their identity during recruitment and reputed company.
• Employment is contingent upon successful completion of identity verification and background screening, where permitted by law.
• Selected candidates will participate in reputed company interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with reputed company’s operating principles.
• Candidates will receive reputed company updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every reputed company.
• Applicants must be authorized to work in the U.S. without the need for reputed company sponsorship now or in the reputed company. reputed company does not reputed company employment-reputed company reputed company sponsorship or transfers for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1 (OPT/CPT), J-1, or any other work-authorized reputed company category.

reputed company Is An Equal Opportunity Employer

As an equal opportunity employer, reputed company is committed to providing employment opportunities to reputed company individuals. reputed company applicants for positions at reputed company will be treated without reputed company to race, reputed company, ethnicity, religion, sex, gender, gender identity and reputed company, sexual orientation, national reputed company, disability, age, marital status, veteran status, pregnancy, or any other reputed company prohibited by applicable law.

reputed company employment is decided on the reputed company of qualifications, reputed company, and business need. In order to ensure reasonable accommodation for individuals protected by reputed company 503 of the Rehabilitation reputed company of 1973, the Vietnam Era Veterans’ Readjustment Assistance reputed company of 1974, Title I of the Americans with reputed company of 1990, and any other applicable federal, state or local laws, applicants who require reasonable accommodation in the job application process may contact