GRC Analyst - Public Sector

📋 Description

• Day-to-day coordination and execution of external Third Party Assessment Organization (3PAO)
• Maintain and update FedRAMP and GovRAMP controls and documentation in alignment with organizational
• Prepare certification and authorization packages and maintain related documentation such as the
• Replace manual evidence collection with system-generated, API-driven, or continuously validated
• Design and evolve an automation-first continuous monitoring program leveraging system integrations
• Lead the day-to-day FedRAMP continuous monitoring process including vulnerability management

🎯 Requirements

• 4+ years of hands-on cybersecurity, compliance, or identity-management experience, including
• Direct experience with FedRAMP, GovRAMP, and NIST frameworks (800-53, 800-63, 800-171).
• Proven ability to personally execute continuous monitoring, vulnerability remediation, and
• Proven ability to design and improve repeatable compliance processes - identifying inefficiencies
• Strong communication, organization, and collaboration skills with the ability to manage multiple
• Ability to adapt to changing requirements.

🎁 Benefits

• Offers Equity
• Offers Bonus