Governance, Risk, and Compliance (GRC) / Compliance Analyst

📋 Description

• Lead ingestion and analysis of agency documentation, including risk assessments, remediation plans
• Direct development of the Agency Risk Understanding Memorandum, including environmental summaries
• Design the Ground-Truth and Ad Hoc Testing Strategies and approve detailed procedures defining
• Map procedures and results to NIST CSF DE.AE, DE.DP, PR.AC; Rule 60GG-2, F.A.C.; and the applicable
• Ensure testing remains within written OCIG authorization, avoids duplication of operational
• Review evidence for relevance, reliability, sufficiency, attribution, timestamps, chain of custody

🎯 Requirements

• Bachelor’s degree in cybersecurity, information assurance, audit, information systems, or related
• Proof of relevant professional certifications such as CISSP, CISA, PMP, CEH, or other relevant
• 10 years of progressive cybersecurity experience, including security operations, incident response
• 5 years supporting or conducting audits, compliance reviews, independent assessments, or assurance
• Demonstrated ability to design defensible test procedures, evaluate control performance
• Working knowledge of professional auditing or assurance standards and evidence requirements.

🎁 Benefits

• Due to the nature of the work we support, all candidates in consideration for this role must be
• Ardent is an equal opportunity employer. We will not discriminate in employment, recruitment