Government Compliance & Security GRC Specialist

MEDITECH; Canton (MA); On-site; USD 110,000 - 150,000; Full time

Job summary

MEDITECH, a leading health IT provider, is seeking a Government Compliance Program Manager in Canton, MA to lead FedRAMP/ITSG-33 readiness, maintain NIST-based controls, and align cloud operations with regulatory standards.

You will author SSPs, SCTMs, POA&Ms; coordinate audits; work with Cloud/DevOps; ensure timely remediation; report to security leadership; require 3+ years in info security and relevant certifications.

Qualifications

• 3+ years in Information Security, IT Compliance, or GRC.
• Hands-on FedRAMP or ITSG-33 experience.
• Practical understanding of NIST SP 800-53 in cloud.
• Experience writing SSPs, POA&Ms, and incident plans.
• Strong written communication for regulatory language.
• Able to coordinate audits with 3PAOs and teams.

Responsibilities

• Author/maintain SSPs, SCTMs, and policy docs.
• Map controls to NIST SP 800-53 and CCCS profiles.
• Track evidence for identity, access, encryption, monitoring.
• Coordinate day-to-day during third-party assessments.
• Manage POA&M register and remediation tracking.
• Collect audit evidence for smooth assessment lifecycles.
• Support Continuous Monitoring program and monthly reviews.

Skills

FedRAMP

ITSG-33

NIST 800-53

Cloud IAM

FIPS Encryption

Vulnerability Mgmt

SSP/POAM Writing

Audits

Policy Mapping

Certifications

Tools

AWS GovCloud

Azure Government

GCP

SIEM

POA&M tooling

Job description

MEDITECH, a leading health IT provider, is seeking a Government Compliance Program Manager in Canton, MA to lead FedRAMP/ITSG-33 readiness, maintain NIST-based controls, and align cloud operations with regulatory standards.

You will author SSPs, SCTMs, POA&Ms; coordinate audits; work with Cloud/DevOps; ensure timely remediation; report to security leadership; require 3+ years in info security and relevant certifications.