Senior GRC Engineer

📋 Description

• Maintain and enhance cybersecurity posture of systems and environments using security engineering
• Guide owners, security teams, and engineers in implementing GRC across the system lifecycle.
• Lead RMF activities: system categorization, control implementation, assessments, authorization, and
• Develop and maintain security documentation, policies, assessment materials, and artifacts aligned
• Support ATO processes, remediation, and POA&M tracking.
• Provide security risk briefings and recommendations to leadership for informed decisions.

🎯 Requirements

• Bachelor’s degree in CS, IS, Cybersecurity, or related field, or equivalent experience.
• 7+ years in cybersecurity, governance, risk management, or security engineering.
• 3+ years supporting ISSO responsibilities in federal environments.
• Experience with security authorization processes, ATOs, POA&Ms, and executive risk reporting.
• Strong knowledge of RMF, NIST CSF, and cybersecurity documentation practices.
• Experience with FedRAMP, cloud service models (IaaS, PaaS, SaaS), and platforms like Azure, M365

🎁 Benefits

• Competitive compensation package.
• Comprehensive benefits to support well-being.
• Fully remote work environment with flexibility.
• Opportunity to work on impactful cybersecurity initiatives for mission-critical systems.
• Collaborative culture focused on technical excellence and growth.
• Opportunities to develop expertise in modern security engineering, automation, and risk practices.