Senior GRC Analyst (NIST/GovRAMP/FedRAMP)

📋 Description

• Own core elements of the GRC program: documentation, vendor risk, policy work.
• Maintain SSPs, policies, POAMs, risk registers, and vendor program.
• Coordinate GovRAMP/FedRAMP/state authorization with security leadership and engineers.
• Drive policy controls and evidence collection improvements across the org.
• Enable audit readiness and support government customers' compliance.

🎯 Requirements

• 7+ years of GRC experience; 3+ in FedRAMP/GovRAMP/StateRAMP.
• Strong NIST 800-53, 800-171, FIPS 199/200, and SOC 2 knowledge.
• Experience authoring SSPs, POAMs, and continuous monitoring.
• Proven track record in third-party risk management and vendor reviews.
• Self-starter who can mature a program with minimal direction.
• Exceptional written English; communications to auditors and executives.
• Bachelor's in Cybersecurity or Information Systems; CISSP/CISA/CRISC/CGRC/CAP a plus.
• Located in the Philippines with night shift hours.

🎁 Benefits

• Fully remote work environment.
• Impact GovRAMP/FedRAMP programs aiding thousands.
• Direct collaboration with security leadership and executives.
• Opportunity to mature a strategic GRC program.