GRC Specialist (US Citizen)

Oligo Cyber Security Ltd.; Illinois; On-site; USD 120,000 - 180,000; Full time

Job summary

Oligo Cyber Security Ltd. is seeking a GRC Specialist to own and drive FedRAMP and NIST 800-53 compliance programs from the ground up in IL. This hands-on role partners with engineering, security, and sales to build, document, and maintain a federal-grade governance program and ensure continuous monitoring and reauthorization readiness.

The role requires U.S. citizenship, 3–5 years of GRC experience, and strong written English for SSPs and policies; familiarity with SOC 2 and ISO 27001 is a

Qualifications

• U.S. citizenship is required for FedRAMP program access and federal customer engagements.
• 3-5 years of hands-on GRC experience, with direct work on NIST control implementation and assessment.
• Direct experience supporting or owning a FedRAMP authorization (Moderate or High baseline) - SSP authorship, POA&M management, or ConMon deliverables.
• Strong written English in SSPs, policies, and customer-facing documentation.

Responsibilities

• Own the FedRAMP process end-to-end: SSP development and maintenance, POA&M tracking, control narratives, and continuous monitoring deliverables.
• Serve as primary point of contact for 3PAO assessments, coordinating testing, evidence collection, and finding resolution.
• Maintain compliance programs across SOC 2 Type II and ISO 27001.
• Respond to customer security questionnaires and support sales with SSPs and security documentation.
• Partner with engineering, GTM, and leadership to ensure controls are implemented, evidenced, and operating effectively.
• Monitor FedRAMP changes, NIST guidance, and federal obligations and translate them into program updates.

Skills

FedRAMP

NIST 800-53

SSP development

ConMon

3PAO coordination

Policy writing

Communication

Tools

Vanta

Drata

Scytale

Job description

Customer Success Full-time

GRC Specialist (US Citizen, IL Based)

Tel Aviv, Israel

Description

About us

Oligo is a fast-growing cybersecurity startup transforming how organizations protect their applications, cloud environments, and AI systems at runtime. Backed by top-tier investors including Greenfield Partners, Red Dot Capital Partners, Lightspeed, Ballistic Ventures, and TLV Partners, we’re on a mission to make real-time security a reality.

Oligo’s industry’s leading runtime security platform built to stop attacks in real time without stopping the business. Wetransform security from passive visibility to active protectionacross applications, cloud services, workloads, and AI systems. By uncovering the deepest layers of what actually runs in production, Oligo helps organizations prioritize exploitable vulnerabilities, detect malicious behavior as it happens, and stop modern attacks in their tracks.

We're looking for a GRC Specialist to own and drive our compliance and authorization programs, with a strong emphasis on FedRAMP and NIST 800-53. This is a hands‑on governance, risk, and compliance role for someone who can build and run a federal‑grade compliance program from the ground up and manage it through continuous monitoring and reauthorization cycles.

U.S. citizenship is required for this role due to FedRAMP and federal customer requirements.

Key Responsibilities

• Own the FedRAMP process end-to-end: System Security Plan (SSP) development and maintenance, POA&M tracking and remediation, control implementation statements, and continuous monitoring (ConMon) deliverables
• Serve as primary point of contact for 3PAO assessments, coordinating testing, evidence collection, and finding resolution
• Maintain compliance programs across SOC 2 Type II and ISO 27001
• Respond to customers security questionnaires, and support sales enablement with SSPs, control narratives, and other security documentation
• Partner with engineering, GTM, and leadership to ensure controls are implemented, evidenced, and operating effectively
• Monitor changes to FedRAMP requirements, NIST guidance, and federal compliance obligations, and translate them into actionable program updates

Requirements

Qualifications

• U.S. citizenship (required for FedRAMP program access and federal customer engagements)
• 3-5 years of hands-on GRC experience, with direct, demonstrable work on NIST control implementation and assessment
• Direct experience supporting or owning a FedRAMP authorization (Moderate or High baseline) - SSP authorship, POA&M management, or ConMon deliverables
• Solid understanding of the FedRAMP process, including 3PAO coordination
• Working knowledge of SOC 2 and ISO 27001 frameworks
• Excellent written English - you will be authoring SSPs, policies, and customer- and agency-facing documentation
• Strong cross-team communication skills and comfort working directly with auditors and assessors
• Ability to work independently and manage multiple compliance workstreams in a fast-paced environment
• Experience with GRC platforms (e.g., Vanta, Drata, Scytale, or similar)

Nice to Have

• Relevant certifications: CISA, CISSP, CAP, or FedRAMP-specific training/certification
• Familiarity with cloud environments (AWS GovCloud, Azure Government) and their native compliance/control mappings