GRC Engineer (NIST)

Workstreet
United States
Workplace: RemoteFull timeFunction: Legal, Risk & ComplianceExperience: 2+ yearsSkills: ["Detail-oriented","Communication","Organizational skills","Client-first mindset","Adaptability"]

Support client-facing federal compliance initiatives by executing NIST SP 800-53 control mappings and authoring core authorization artifacts such as System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms). Conduct readiness and gap assessments across the Assessment & Authorization lifecycle, assist with continuous monitoring, and coordinate with 3PAOs during FedRAMP Moderate/High validation—while communicating clearly with U.S. client technical leads.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Workstreet
Workstreet
5 days ago

GRC Engineer (NIST)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Support client-facing federal compliance initiatives by executing NIST SP 800-53 control mappings and authoring core authorization artifacts such as System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms). Conduct readiness and gap assessments across the Assessment & Authorization lifecycle, assist with continuous monitoring, and coordinate with 3PAOs during FedRAMP Moderate/High validation—while communicating clearly with U.S. client technical leads.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Mid level

Key Responsibilities

  • •Execute NIST SP 800-53 control mappings by analyzing NIST security/privacy controls and baselines for federal agency standards.
  • •Create, update, and maintain authorization documentation including SSPs, POA&Ms, and supporting A&A artifacts.
  • •Perform technical readiness and gap assessments to prepare clients for federal agency ATO or FedRAMP authorization validation paths.
  • •Support continuous monitoring by tracking monthly vulnerability logs, POA&M updates, and structural change requests.
  • •Guide clients through the A&A process and coordinate assessment logistics with 3PAOs and independent assessors.
Travel: Low travel

Pay and Benefits

Perks:Remote WorkLearning Budget

Key Requirements

  • •2+ years of experience executing GRC deliverables across NIST SP 800-53, FedRAMP, or NIST RMF lifecycles.
  • •Hands-on experience creating, evaluating, and maintaining System Security Plans (SSPs), POA&Ms, and related A&A artifacts.
  • •Strong organization skills to manage multiple federal compliance project tasks concurrently under senior guidance.
  • •Familiarity with cloud service providers and secure configurations in government clouds (e.g., AWS GovCloud or Azure Government).
  • •Strong written and verbal English communication for engagement with U.S. client technical leads and assessors.
Experience:2+ yearsGRCFederal complianceFedRAMPNIST RMFGovernment clouds
Skills:Detail-orientedCommunicationOrganizational skillsClient-first mindsetAdaptability
Certifications:CGRCCAPCISSPCompTIA Security+
Languages:English
Tech Stack:NIST SP 800-53FedRAMPNIST Risk Management Framework (RMF)System Security Plans (SSPs)Plans of Action and Milestones (POA&Ms)Assessment and Authorization (A&A)Authority to Operate (ATO)Continuous monitoring (ConMon)Vulnerability logs3PAOCMMC 2.0NIST SP 800-171FedRAMP ModerateFedRAMP HighAWS GovCloudAzure GovernmentCUIDFARSGovCloud

Eligibility

Visa:H-1BL-1TNO-1E-3H-1B1F-1 (OPT/CPT)J-1
Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

Workstreet
Operates an online recruitment platform connecting employers with job seekers, offering job listings, candidate sourcing tools, and employer branding solutions to streamline hiring and talent acquisition processes for small to medium-sized businesses.
Industry: HR Tech
Website