GRC Analyst: Cyber Defense Risk & Compliance

Chaos Industries; Washington; On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Health benefits

401k match

FSA/HSA

Life insurance

Free daily lunch

Job summary

CHAOS Industries is recruiting a senior GRC professional to own and mature our cybersecurity risk management program across multiple departments. You will establish governance, policy, and control frameworks aligned to NIST, ISO, and DoD requirements, and coordinate audits with Legal, Compliance, and IT teams.

You will design risk processes, maintain the risk register, and drive security maturity beyond compliance while translating broad requirements into practical controls.

Qualifications

• Bachelor’s degree or equivalent in CS/IS or related field, or equivalent practical experience.
• Deep knowledge of NIST CSF, NIST RMF, ISO/IEC 27000 series, UK Cyber Essentials, CMMC/NIST 800-171, NIST 800-53.
• Experience selecting, implementing, or administering GRC tooling and workflows.
• Exposure to governance, risk, and compliance frameworks across security, privacy, and quality management domains.
• Familiarity with OT/ICS security concepts.
• Minimum of 5 years hands-on GRC/compliance experience in a DoD environment or military service.
• Supported third-party or certification audits from evidence collection to closure.
• Ability to design real, working controls tailored to an organization.

Responsibilities

• Own risk assessments across departments and maintain the centralized risk register.
• Design and maintain a unified control framework tailored to CHAOS Industries’ environment, including MTD, RPO, and RTO for critical systems.
• Write and maintain policy that goes beyond minimum compliance, building security maturity.
• Manage GRC tooling and workflows to support risk assessments, control monitoring, and reporting.
• Coordinate audits, evidence requests, customer reviews, and remediation tracking with Legal, Compliance, and IT teams.
• Act as a bridge between departments to develop security and compliance requirements.
• Report to the Program Director and executives on risk posture and program maturity.
• Onsite presence required 4 days per week.
• Travel up to 25% to support Manufacturing and Physical Security control validation.
• Support cybersecurity risk management with customers, vendors, and subcontractors.

Skills

GRC

NIST RMF

NIST CSF

ISO 27000 series

CMMC/NIST 800-171

Audit coordination

Education

Bachelor’s degree in CS/IS or related field

Tools

GRC tooling

Job description

CHAOS Industries is recruiting a senior GRC professional to own and mature our cybersecurity risk management program across multiple departments. You will establish governance, policy, and control frameworks aligned to NIST, ISO, and DoD requirements, and coordinate audits with Legal, Compliance, and IT teams.

You will design risk processes, maintain the risk register, and drive security maturity beyond compliance while translating broad requirements into practical controls.