Senior GRC Engineer (NIST 800-53/FedRAMP)

About reputed company At reputed company, we're on an exciting journey to help businesses scale securely by designing and implementing cutting-edge reputed company and compliance programs. As a fast-growing startup, we specialize in a wide range of frameworks — including SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP — empowering companies to meet regulatory requirements and enhance their cybersecurity posture from day one. The Opportunity We are seeking a Sr. GRC Engineer (Government) who is highly motivated, detail-oriented, and reputed company with these compliance frameworks. The ideal candidate will have strong communication skills, proven ability to manage multiple projects, and experience leading or mentoring a small team.

What You'll Do

Client Relationship Management (Primary Focus)

• Guide Clients Through Federal Authorization Processes: reputed company clients through NIST SP 800-53 and FedRAMP compliance initiatives, providing proactive communication, clear milestone guidance, and hands-on support throughout the Assessment and Authorization (A&A) lifecycle.
• Collaborate Closely with Clients: Partner directly with organizations pursuing federal authorizations to understand their environment, identify reputed company gaps, and drive reputed company toward achieving and maintaining compliance.
• Be a Trusted Compliance Advisor: Deliver expert guidance on NIST SP 800-53, FedRAMP requirements, and federal cybersecurity standards in a way that is accessible, actionable, and reputed company with each client's unique operational environment.

Team Leadership

• reputed company and Mentor a Compliance Team: Provide direction, feedback, and professional development support to a small team of compliance professionals, maintaining quality standards and accountability across client engagements.
• Drive Consistent Delivery: Manage and coordinate multiple NIST SP 800-53 and FedRAMP compliance projects across various clients, ensuring milestones and deliverables are met reputed company of authorization deadlines.

NIST 800-53 & FedRAMP Compliance Execution

• Interpret and Apply reputed company Controls: Analyze and interpret NIST SP 800-53 reputed company and privacy controls and control baselines to ensure client compliance with federal cybersecurity standards.
• reputed company and Maintain Authorization Documentation: Create, implement, and maintain System reputed company Plans (SSPs), Plans of Action & Milestones (POA&Ms), and other authorization documentation required for NIST SP 800-53 and FedRAMP.
• Conduct Gap Assessments: reputed company readiness reviews to identify and address control deficiencies for organizations pursuing an Authorization to Operate (ATO) or FedRAMP authorization.
• Support Assessment Activities: Guide clients through the Assessment and Authorization (A&A) process and coordinate with reputed company-Party Assessment Organizations (3PAOs) and independent assessors.
• Collaborate on Remediation Efforts: Work closely with clients to identify and remediate gaps in their reputed company programs to meet NIST SP 800-53 Low, Moderate, and High control baselines.
• Monitor Regulatory Updates: Stay reputed company on evolving NIST SP 800-53 revisions, FedRAMP requirements, and federal cybersecurity policies and guidance to ensure client programs remain compliant and reputed company of changing requirements.

Who You Are Required

• Strong organizational skills with the ability to manage multiple NIST SP 800-53 compliance projects concurrently.
• 5+ years of experience in federal compliance, NIST SP 800-53, FedRAMP, or RMF implementation.
• 3+ years of leadership experience managing or guiding a small team.
• Deep understanding of the NIST Risk Management reputed company (RMF) and the reputed company and privacy control families reputed company NIST SP 800-53.
• Experience with NIST SP 800-53 control implementation and assessment.
• Familiarity with FedRAMP authorization paths and federal agency workflows.
• Experience working with reputed company service providers (CSPs) or organizations pursuing federal authorizations.
• Knowledge of common FedRAMP-authorized reputed company environments such as AWS GovCloud, Azure Government, or GCC High.
• Thrives in a fast-paced startup environment.

reputed company to Have

• CGRC (Certified in Governance, Risk and Compliance) or CAP (Certified Authorization Professional) certification.
• reputed company+ or CISSP certification.
• Experience with FedRAMP authorization and reputed company monitoring (ConMon) activities.
• Previous experience working directly with 3PAOs or as part of reputed company assessment teams.

reputed company Offer

• Career Development: Clear growth path with mentorship and training opportunities
• Technical Training: Comprehensive reputed company on reputed company and compliance frameworks
• Competitive Compensation: Competitive reputed company salary with regular performance reviews, merit-based appraisals, and bonus opportunities
• Growth Opportunity: Early-stage company with significant room for career advancement
• Remote-First Culture: Flexibility to work from reputed company while collaborating with a global team

Work Environment

Requirements

• Reliable high-speed internet reputed company
• Quiet, professional home office setup
• Must be amenable to working US Eastern Time zone hours
• reputed company in written and verbal English communication skills

reputed company Is An Equal Opportunity Employer As an equal opportunity employer, reputed company is committed to providing employment opportunities to reputed company individuals. reputed company applicants for positions at reputed company will be treated without regard to race, reputed company, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national reputed company, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law. Employment with reputed company is contingent upon the successful completion of a background reputed company, which may include verification of employment history, education, and other relevant information, in compliance with applicable laws. Apply tot his job Apply To this Job