GRC Analyst - Public Sector

Socure
United States
Workplace: HybridFull timeUSD 120,000 - 145,000 annuallyFunction: Government & Public AdministrationExperience: 4+ yearsSkills: ["Communication","Organization","Collaboration","Prioritization","Adaptability"]

Own governance, risk, and compliance execution for the public sector business, driving FedRAMP/GovRAMP continuous monitoring and coordinating evidence collection, vulnerability remediation, access reviews, and auditor requests. Maintain and update control documentation (including POA&M, SSP packages, and trackers) using automation-first approaches and machine-readable formats like OSCAL. Serve as a security subject matter expert for public sector sales and RFP responses, translating compliance controls into clear buyer narratives.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Socure
Socure
8 hours ago

GRC Analyst - Public Sector

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 50 minutes agoStatus: Live

Job Summary

Own governance, risk, and compliance execution for the public sector business, driving FedRAMP/GovRAMP continuous monitoring and coordinating evidence collection, vulnerability remediation, access reviews, and auditor requests. Maintain and update control documentation (including POA&M, SSP packages, and trackers) using automation-first approaches and machine-readable formats like OSCAL. Serve as a security subject matter expert for public sector sales and RFP responses, translating compliance controls into clear buyer narratives.
Location: United States
Workplace: Hybrid
Employment Type: Full time
Job Function: Government & Public Administration
Seniority: Mid level

Key Responsibilities

  • •Coordinate and execute external 3PAO assessments and respond to auditor requests for evidence and documentation.
  • •Maintain FedRAMP/GovRAMP controls and prepare certification/authorization packages including SSP and appendices.
  • •Lead day-to-day FedRAMP continuous monitoring, managing vulnerability lifecycle activities and coordinating remediation within required timelines.
  • •Design automation-first evidence and continuous monitoring processes, including trackers, status reporting artifacts, and workflows integrated with system integrations/telemetry.
  • •Support public sector sales by translating compliance controls into customer-facing security narratives and contributing to RFP/RFx response content.

Pay and Benefits

Salary: USD 120,000 - 145,000 annually
Equity and Bonus:Equity

Key Requirements

  • •4+ years of hands-on cybersecurity, compliance, or identity-management experience, including personal execution of FedRAMP/GovRAMP or comparable continuous-monitoring work.
  • •Direct experience with FedRAMP, GovRAMP, and NIST frameworks (800-53, 800-63, 800-171).
  • •Proven ability to personally execute continuous monitoring, vulnerability remediation, and compliance reporting.
  • •Proven ability to design and improve repeatable compliance processes, including using AI tools and machine-readable formats like OSCAL.
  • •Must be a U.S. Person (U.S. Citizens or U.S. Permanent Residents) residing in the United States and be able to obtain a U.S. OPM NACI clearance.
Experience:4+ yearsCybersecurityComplianceIdentity-managementFedRAMPGovRAMPPublic sector
Skills:CommunicationOrganizationCollaborationPrioritizationAdaptability
Certifications:CISSPCISMCISAIAPP
Tech Stack:FedRAMPGovRAMPNIST SP 800-53NIST SP 800-63NIST SP 800-171POA&MSystem Security Plan (SSP)OSCALWizBurp SuiteAWS native servicesMachine-readable formatsAPI-driven evidence

Eligibility

Nationality:US National
Security Clearance:OPM NACI

Company Brief

Socure
Provides AI-driven digital identity verification and fraud prevention solutions that analyze device, behavioral, and contextual data to detect synthetic identities, stop account takeover, and enable secure onboarding for banks, fintechs, and enterprises.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series E+
Headquarters: New York, United States
Founded: 2012
Glassdoor
Glassdoor: 4.1
WebsiteLinkedIn