GRC Analyst - Associate

Securepro Inc; Washington (District of Columbia); On-site; USD 65,000 - 95,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Job summary

SecurePro is seeking a motivated and detail-oriented Associate Governance, Risk, and Compliance (GRC) Analyst to support a federal cybersecurity program in Washington, DC. The team works on governance, risk management, and compliance across ~32 FISMA Moderate information systems and collaborates with Senior/Lead ISSOs to support audits and documentation.

The ideal candidate has strong organizational and analytical skills, a basic understanding of cybersecurity concepts, and an interest in

Qualifications

• Bachelor's degree in cybersecurity, IT, CS, IS, business, or related field.
• Academic coursework, internships, or professional exposure to cybersecurity, IT auditing, risk management, or regulatory compliance.
• Familiarity with NIST SP 800-53, NIST SP 800-37, FISMA, or RMF.
• Basic understanding of security assessments, compliance reviews, or authorization processes.
• Familiarity with SSPs, POA&Ms, or security control documentation.
• Exposure to CSAM, ServiceNow, Splunk, or other cybersecurity and compliance management tools.
• Familiarity with vulnerability management tools such as Tenable Nessus, Qualys, or ACAS.

Responsibilities

• Assist with day-to-day cybersecurity governance, risk management, and compliance activities supporting federal information systems.
• Support RMF activities in accordance with NIST SP 800-37 and applicable federal cybersecurity requirements.
• Collect, organize, and maintain cybersecurity documentation, assessment records, and compliance evidence.
• Assist with maintaining System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and other security documentation.
• Track security findings, remediation activities, action items, and compliance deadlines.
• Support the maintenance of cybersecurity records and authorization information in CSAM or other Governance, Risk, and Compliance (GRC) platforms.

Skills

Organizational skills

Analytical skills

Attention to detail

Interest in federal frameworks

Education

Bachelor's degree in Cybersecurity, IT, CS, IS, Business, or related field

Tools

CSAM

ServiceNow

Splunk

Tenable Nessus

Qualys

ACAS

Job description

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance

SecurePro is seeking a motivated and detail-oriented Associate Governance, Risk, and Compliance (GRC) Analyst to support a federal cybersecurity program in Washington, DC. The team provides cybersecurity governance, risk management, and compliance support across a portfolio of approximately 32 FISMA Moderate information systems.

The Associate GRC Analyst will work under the guidance of experienced cybersecurity professionals, including Senior and Lead Information System Security Officers (ISSOs), to support federal security compliance activities, risk tracking, documentation management, continuous monitoring, and audit preparation.

This is a hands-on, on-site position designed for an early-career professional interested in developing a career in cybersecurity governance, risk management, compliance, and federal information security.

The ideal candidate has strong organizational and analytical skills, attention to detail, a basic understanding of cybersecurity concepts, and an interest in learning federal security frameworks and compliance processes.

Key Responsibilities

• Assist with day-to-day cybersecurity governance, risk management, and compliance activities supporting federal information systems.
• Support Risk Management Framework (RMF) activities in accordance with NIST SP 800-37 and applicable federal cybersecurity requirements.
• Collect, organize, and maintain cybersecurity documentation, assessment records, and compliance evidence.
• Assist with maintaining System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and other security documentation.
• Track security findings, remediation activities, action items, and compliance deadlines.
• Support the maintenance of cybersecurity records and authorization information in CSAM or other Governance, Risk, and Compliance (GRC) platforms.

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Business, or a related field.
• Academic coursework, internships, or professional exposure to cybersecurity, IT auditing, risk management, or regulatory compliance.
• Familiarity with NIST SP 800-53, NIST SP 800-37, FISMA, or the Risk Management Framework (RMF).
• Basic understanding of security assessments, compliance reviews, or authorization processes.
• Familiarity with System Security Plans (SSPs), POA&Ms, or security control documentation.
• Exposure to CSAM, ServiceNow, Splunk, or other cybersecurity and compliance management tools.
• Familiarity with vulnerability management tools such as Tenable Nessus, Qualys, or ACAS.

Flexible work from home options available.