Senior GRC Lead: GovRAMP/FedRAMP & NIST (Remote)

Career Team Enterprises; Philippines; À distance; PHP 5 646 000 - 7 528 000; Plein temps

Résumé du poste

Career Team is seeking a Senior GRC Analyst to own core GRC elements, including SSPs, POA&Ms, and evidence for GovRAMP, FedRAMP, and state authorizations. You will partner with security leadership, engineering, and executives to improve controls and evidence collection in a fully remote environment.

The role emphasizes hands-on ownership, policy maturation, and cross-functional collaboration to ensure audit readiness and continuous improvement across the organization.

Qualifications

• 7+ years of hands-on GRC experience including FedRAMP or GovRAMP programs.
• Experience authoring SSPs, POA&Ms, and continuous monitoring deliverables.
• Strong knowledge of NIST 800-53, NIST 800-171, and SOC 2.
• Excellent written English for auditors and executives.

Responsabilités

• Own and mature the GRC program elements: SSPs, policies, POA&M lifecycle, risk register, and vendor program.
• Maintain and version-control the policy library written in plain English.
• Coordinate with U.S. security team and 3PAOs for GovRAMP/FedRAMP/state authorization and monitoring.
• Run third-party risk management: security questionnaires, due diligence, contract reviews, reassessments.
• Administer onboarding/offboarding security checklists and access reviews with HR/IT.
• Lead security awareness training, phishing simulations, and Rules of Behavior administration.
• Draft tabletop exercise scenarios and produce after-action reports with remediation owners.

Connaissances

GRC program ownership

FedRAMP/GovRAMP

NIST 800-53

SOC 2

Documentation management

Vendor risk management

Security policy development

Audit evidence collection

Formation

Bachelor's degree in Cybersecurity or related field

Certifications (CISSP, CISA, CRISC) a plus

Outils

Drata

Vanta

Hyperproof

ServiceNow GRC

Description du poste

Career Team is seeking a Senior GRC Analyst to own core GRC elements, including SSPs, POA&Ms, and evidence for GovRAMP, FedRAMP, and state authorizations. You will partner with security leadership, engineering, and executives to improve controls and evidence collection in a fully remote environment.

The role emphasizes hands-on ownership, policy maturation, and cross-functional collaboration to ensure audit readiness and continuous improvement across the organization.