GRC Engineer (CMMC)

Workstreet
United States
Workplace: RemoteFull timeFunction: Legal, Risk & ComplianceExperience: 2+ yearsSkills: ["Written communication","Verbal communication","Client-facing communication","Attention to detail","Portfolio coordination"]

Guide defense contractors and federal organizations through CMMC and FedRAMP compliance efforts by analyzing NIST SP 800-53 controls and FedRAMP Moderate/High baselines, producing authorization artifacts (SSPs, POA&Ms, SARs, SAPs), and running readiness gap assessments for JAB/Agency ATO paths. Execute continuous monitoring, coordinate assessment pipelines with CSPs and 3PAOs, and translate CUI/DFARS and security requirements into clear, actionable milestones for clients across GovCloud environments.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Workstreet
Workstreet
5 days ago

GRC Engineer (CMMC)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Guide defense contractors and federal organizations through CMMC and FedRAMP compliance efforts by analyzing NIST SP 800-53 controls and FedRAMP Moderate/High baselines, producing authorization artifacts (SSPs, POA&Ms, SARs, SAPs), and running readiness gap assessments for JAB/Agency ATO paths. Execute continuous monitoring, coordinate assessment pipelines with CSPs and 3PAOs, and translate CUI/DFARS and security requirements into clear, actionable milestones for clients across GovCloud environments.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Mid level

Key Responsibilities

  • •Analyze NIST SP 800-53 controls and FedRAMP Moderate/High baselines to ensure client architectures meet federal requirements.
  • •Author and update authorization artifacts including SSPs, control implementation narratives, POA&Ms, SAPs, and SARs.
  • •Perform readiness assessments and gap analyses for Joint Authorization Board (JAB) or Agency ATO validation paths.
  • •Architect authorization boundaries and scoping profiles across FedRAMP and CMMC, including mapping data flows and shared responsibility models.
  • •Run continuous monitoring cycles by tracking vulnerability management logs, incident response reports, and structural change control workflows.
Travel: Low travel

Pay and Benefits

Perks:Learning BudgetRemote Work

Key Requirements

  • •2+ years executing GRC work with exposure to FedRAMP, NIST SP 800-53, and federal authorization lifecycles.
  • •Hands-on experience authoring and maintaining core authorization artifacts, including System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms).
  • •Knowledge of CMMC 2.0 and NIST SP 800-171 baselines as applied to defense contractors and supply chain environments.
  • •Familiarity with shared responsibility models and secure configurations in government clouds such as AWS GovCloud, Azure Government, or Microsoft GCC High.
  • •Experience coordinating multiple fast-moving client compliance initiatives while preserving documentation quality.
Experience:2+ yearsGRCFederal complianceDefense contractorsFedRAMPSaaS
Skills:Written communicationVerbal communicationClient-facing communicationAttention to detailPortfolio coordination
Certifications:CMMC Registered Practitioner (RP)CMMC Certified Professional (CCP)CMMC Certified Assessor (CCA)CISSPCISMCompTIA Security+
Languages:English
Tech Stack:CMMC 2.0CMMCFedRAMPNIST SP 800-53NIST SP 800-171SOC 2ISO 27001GDPRNIST 800-171NIST 800-53FedRAMP ModerateFedRAMP HighSystem Security Plans (SSPs)Plans of Action and Milestones (POA&Ms)JABAuthority to Operate (ATO)Continuous Monitoring (ConMon)JAB readinessAWS GovCloudAzure Government

Eligibility

Visa:H-1BL-1TNO-1E-3H-1B1F-1OPT/CPTJ-1
Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

Workstreet
Operates an online recruitment platform connecting employers with job seekers, offering job listings, candidate sourcing tools, and employer branding solutions to streamline hiring and talent acquisition processes for small to medium-sized businesses.
Industry: HR Tech
Website