Corporate Governance, Risk and Compliance Analyst

Jobtailor; Deutschland; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Onebrief is seeking a senior cybersecurity compliance specialist to own RMF authorizations across DoD components, FedRAMP High, CMMC 2.0 and SOC 2 for corporate systems. You will ensure continual authorization and audit evidence across SSPs, SARs, POA&Ms, STIGs, and control mappings.

You will partner with Engineering, Product, and Security to embed compliance requirements into system design and CI/CD workflows, aligning risk management with development cycles and audit readiness.

Qualifikationen

• Bachelor's degree in CS/Cybersecurity/IT or related field required.
• ,
• 8+ years in cybersecurity compliance.

Aufgaben

• Own RMF authorizations across Department of War components and FedRAMP High, alongside CMMC 2.0 and SOC 2 compliance for corporate systems
• Maintain authorization and audit evidence, including SSPs, SARs, POA&Ms, STIGs, and control mappings
• Partner with Engineering, Product, and Security to embed compliance requirements into system design and CI/CD workflows, not bolt them on afterward
• Coordinate internal assessments and external audit readiness across all applicable frameworks
• Track regulatory and contractual changes and advise leadership on what they mean for Onebrief
• Run risk assessments and vendor/supply chain risk reviews across both federal and corporate environments

Kenntnisse

RMF authorizations

CMMC 2.0

SOC 2

GRC platforms

Audit readiness

Vendor risk management

Ausbildung

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field

Tools

eMASS experience

GRC tools

Jobbeschreibung

Responsibilities

• Own RMF authorizations across Department of War components and FedRAMP High, alongside CMMC 2.0 and SOC 2 compliance for corporate systems
• Maintain authorization and audit evidence, including SSPs, SARs, POA&Ms, STIGs, and control mappings
• Partner with Engineering, Product, and Security to embed compliance requirements into system design and CI/CD workflows, not bolt them on afterward
• Coordinate internal assessments and external audit readiness across all applicable frameworks
• Track regulatory and contractual changes and advise leadership on what they mean for Onebrief
• Run risk assessments and vendor/supply chain risk reviews across both federal and corporate environments

Requirements

• U.S. Citizen
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field
• 8+ years in cybersecurity compliance
• Hands‑on expertise with RMF and at least one of CMMC 2.0 or SOC 2
• One or more of the following certifications: CISSP, CISM, CISSO, CPTE, CySA+, FITSP-A, GCSA, CISA, ISSEP, GSLC, or GSNA
• Experience with GRC platforms, including automated evidence collection and testing (eMASS experience a plus)