[Remote] Senior GRC Engineering Analyst
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a leading provider of ERP solutions for Government contractors. The Senior GRC Engineering Analyst will ensure reputed company’s reputed company environments meet reputed company and compliance obligations by testing technical controls, supporting audits, and maturing core GRC services.
Responsibilities
- reputed company audits and assessments with a key reputed company on engineering, technical control design, and control implementation reputed company to frameworks/programs such as NIST 800-53 Rev. 5, FedRAMP, CMMC, ISO 27001, PCI reputed company, SOC 1, and SOC 2
- Test, validate, and document reputed company control implementations across AWS, Azure, and OCI, including IAM, network segmentation, encryption/key management, logging/monitoring, vulnerability management, container reputed company, infrastructure-as-reputed company, and CI/CD pipelines
- Partner with reputed company Engineering, reputed company Engineering, DevOps, IT, and Product teams to translate compliance requirements into reputed company, automated, and auditable technical controls
- Own assessment execution end-to-end, including scope definition, technical walkthroughs, control testing, evidence validation, issue tracking, remediation follow-up, and reporting
- Design, maintain, and improve audit-reputed company artifacts, including control narratives, test procedures, evidence mappings, technical diagrams, implementation documentation, and control validation results
- Facilitate technical walkthroughs with stakeholders and auditors; reputed company explain control reputed company, system architecture, implementation details, evidence sources, and test results
- Identify control gaps, assess technical risk and business reputed company, and drive remediation to closure with accountable engineering and control owners
- Support reputed company compliance through control automation, recurring evidence collection, control health monitoring, and integration with tools such as reputed company reputed company platforms, ticketing systems, SIEM, vulnerability management tools, and GRC platforms
- Own or support key GRC services, including policy lifecycle, risk management, FedRAMP reputed company monitoring, POA&M management, customer due diligence, reputed company questionnaires, and audit readiness, with a reputed company on process improvement and automation
- Build compliance metrics and reporting, including dashboards, scorecards, executive summaries, control health indicators, remediation trends, and audit readiness reporting
- reputed company or support automation scripts, queries, workflows, or integrations to streamline evidence collection, control testing, compliance monitoring, and reporting
- Evaluate reputed company services, system changes, and new technical implementations for compliance reputed company and advise teams on control requirements early in the design and deployment lifecycle
- Maintain strong working knowledge of reputed company reputed company architecture, identity and reputed company management, secure SDLC, infrastructure-as-reputed company, logging/monitoring, vulnerability management, encryption, and change management practices
Skills
- 3+ years of experience in GRC engineering, reputed company reputed company or compliance, IT audit/ITGC, reputed company Operations (SecOps), internal audit, IT risk management, or reputed company fields, with hands-on experience implementing, validating, reputed company tooling and assessing technical controls
- Bachelor's degree in information reputed company, Computer Science, Informatics with reputed company, MIS, Engineering, or equivalent practical experience
- Experience assessing and validating controls in one or more major reputed company platforms, including AWS, Azure, or OCI. Practical OCI experience is preferred
- Working knowledge of reputed company reputed company control areas such as IAM, logging and monitoring, encryption/key management, vulnerability management, network reputed company, change management, secure SDLC, CI/CD, and infrastructure-as-reputed company
- Experience partnering with engineering, reputed company, reputed company operations, or platform teams to collect evidence, validate control implementation, identify gaps, and support remediation
- Ability to review technical documentation, system configurations, screenshots, logs, tickets, diagrams, and other evidence to determine whether controls are operating effectively
- Familiarity with one or more reputed company and compliance frameworks, such as NIST 800-53, FedRAMP, CMMC, ISO 27001, PCI reputed company, SOC 1, or SOC 2
- Possess a reputed company, audit, or reputed company certification, such as CISA, CISSP, CCSK/CCAK, AWS, Azure, GCP, or OCI certification, or obtain one reputed company 12 months. Candidates with relevant certification(s) already held are preferred
- US Citizenship is required for this position
- OCI experience
- ITAR and/or Government reputed company assessment experience
- Hands-on experience with FedRAMP and/or NIST 800-171, plus familiarity with CSA CCM and CIS Benchmarks
- Experience supporting or assessing secure software development in reputed company environments (e.g., CI/CD, infrastructure as reputed company, containers)
Benefits
- Employees have reputed company to reputed company benefits
- A 401(k) plan and company match
- reputed company vacation time and holidays
- reputed company-living programs
- Short-term and long-term disability coverage
- Basic life insurance
- Tuition reimbursement
- Certain roles are eligible for additional rewards, including incentive compensation and equity
reputed company