GRC Compliance Advisor: Security Controls & Frameworks

Coalfire; Northern (KY); Hybrid; USD 60,000 - 75,000; Full time

Job summary

Coalfire in Kentucky seeks a junior security contributor to participate in client-facing control testing interviews and assist with information gathering for engagements. You will analyze security control artifacts against compliance standards and document results clearly, developing recommendations to improve compliance processes.

The role offers exposure to Governance, Risk, and Compliance (GRC) essentials and focuses on frameworks such as FedRAMP, ISO, SOC, and HIPAA/HITRUST.

Qualifications

• Gains exposure to client-facing portions of the security assessment process.
• Assists with information/artifact gathering for client engagements.
• Develops skills in documenting results clearly and effectively.

Responsibilities

• Gains exposure to the client-facing portion of the security assessment process by participating in control testing interviews for client engagements and assisting the Coalfire team with information/artifact gathering.
• Contributes to advisory deliverables by analyzing security control artifacts against compliance standards, and applying technical writing to document results clearly.
• Deepens understanding of cybersecurity essentials with a focus on Governance, Risk, and Compliance (GRC).
• Understands security frameworks such as FedRAMP, ISO, SOC, and HIPAA/HITRUST, focusing on their structure, control requirements, and scoring methodology.
• Contributes to developing recommendations for improving compliance processes and controls.

Skills

Interviewing clients

Artifact gathering

Technical writing

Job description

Coalfire in Kentucky seeks a junior security contributor to participate in client-facing control testing interviews and assist with information gathering for engagements. You will analyze security control artifacts against compliance standards and document results clearly, developing recommendations to improve compliance processes.

The role offers exposure to Governance, Risk, and Compliance (GRC) essentials and focuses on frameworks such as FedRAMP, ISO, SOC, and HIPAA/HITRUST.