Staff Security Engineer, GRC

📋 Description

• Lead governance and compliance for CMS EDE platforms.
• Translate CMS EDE, FedRAMP, and NIST SP 800-53 into practical controls.
• Partner with engineering, security, legal, and CMS stakeholders.
• Support audit-readiness and regulator-facing evidence for AWS/Azure.
• Own risk management and evidence workflows for cloud platforms.
• Report to the CISO and drive cross-functional security initiatives.

🎯 Requirements

• 7+ years in governance, risk, compliance, or regulated tech.
• Deep CMS EDE knowledge, Phase 3 certification readiness.
• Strong NIST SP 800-53 control mapping for cloud platforms.
• Hands-on with IaC, policy-as-code, and automated evidence collection.
• Experience with CMS significant change requests and risk analyses.
• Ability to communicate regulatory needs to technical and non-technical audiences.

🎁 Benefits

• Medical, dental, vision benefits for full-time employees.
• 11 paid holidays, paid time off, and parental leave.
• 401(k) plan participation and matching options.
• Life and disability insurance coverage.
• Equity grants and annual performance bonuses.