GRC Security Engineer: Federal RMF & FedRAMP Expert

SpaceXAI; Palo Alto (CA); On-site; USD 100,000 - 198,000; Full time

Benefits offered by this job

Equity

Medical coverage

Vision coverage

Dental coverage

401(k) plan

Disability insurance

Life insurance

Other discounts

Job summary

SpaceXSI is seeking an experienced Governance, Risk, and Compliance (GRC) professional to help scale our program as SpaceXSI grows. This critical role will ensure that SpaceXSI operates within regulatory, ethical, and operational boundaries while fostering a culture of integrity and resilience.

The primary focus of this role is to provide and sustain deep expertise in the NIST Risk Management Framework (RMF), FedRAMP, and Impact Level 4/5 (IL4/IL5) authorization processes.

Qualifications

• Bachelor's degree in computer science, information security, cybersecurity, or STEM.
• 3+ years in governance, risk management, compliance, or tech audit.
• At least 1 year with FedRAMP/IL5 compliance, vulnerability management, and continuous monitoring.
• Experience implementing security compliance frameworks and cloud security controls.
• Expert knowledge in DoD SRG IL5/IL6, FedRAMP Class D., and/or NIST 800-171/CMMC.

Responsibilities

• Execute security compliance implementation and audits (DoD SRG IL5/IL6, FedRAMP etc.).
• Oversee audits, certifications, third-party assessments, and vulnerability management.
• Design and implement risk mitigation strategies, including POAMs and STIGs.
• Ensure security configurations and practices throughout the project lifecycle.
• Serve as liaison between system owners, security, and cross-functional teams.
• Lead A&A processes and cloud system risk assessments for new products.
• Conduct regular risk assessments and proactive threat evaluations.
• Provide guidance on risk, compliance, and cybersecurity to leadership.
• Create and present reports on GRC performance and compliance to senior leadership.

Skills

GRC expertise

FedRAMP IL5

CI/CD security

DevSecOps

ISO/NIST familiarity

Education

Bachelor’s degree in CS/InfoSec/Engineering

Tools

OPA (policy-as-code)

CI/CD tooling

Job description

SpaceXSI is seeking an experienced Governance, Risk, and Compliance (GRC) professional to help scale our program as SpaceXSI grows. This critical role will ensure that SpaceXSI operates within regulatory, ethical, and operational boundaries while fostering a culture of integrity and resilience.

The primary focus of this role is to provide and sustain deep expertise in the NIST Risk Management Framework (RMF), FedRAMP, and Impact Level 4/5 (IL4/IL5) authorization processes.