Hybrid RMF & GRC Compliance Analyst

CL 1e6d8f31 073f 48cd b324 b581c00084bf; Washington (District of Columbia); Hybrid; USD 80,000 - 110,000; Full time

Job summary

CL 1e6d8f31 073f 48cd b324 b581c00084bf is seeking a Compliance Analyst focused on GRC and RMF initiatives. You will support governance and compliance by developing security documentation in accordance with federal standards. The ideal candidate will have experience in cybersecurity compliance and strong communication skills.

This is a hybrid position based in Washington, DC, requiring a detail-oriented individual to manage multiple compliance workstreams while engaging with various stakeholders.

Qualifications

• 3–6+ years of experience in GRC, RMF, or cybersecurity compliance roles.
• Strong knowledge of FISMA and NIST guidelines.
• Ability to produce audit-ready documentation.

Responsibilities

• Support GRC initiatives by managing compliance documentation.
• Lead discussions and communicate requirements with stakeholders.
• Manage multiple compliance workstreams effectively.

Skills

Authoring security documentation

Knowledge of NIST SP 800-53

Developing documentation based on compliance requirements

Experience supporting FedRAMP and/or CMMC

Understanding of SOC 2 principles

Proficiency with GRC tools

Translating technical configurations

Managing POA&Ms

Engagement with customers

Written and verbal communication

Organizational skills

Experience with business tools

Technical proficiency in cloud and on-prem environments

Basic understanding of AI tools

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Microsoft Word

Microsoft Excel

SharePoint

Microsoft Teams

Job description

CL 1e6d8f31 073f 48cd b324 b581c00084bf is seeking a Compliance Analyst focused on GRC and RMF initiatives. You will support governance and compliance by developing security documentation in accordance with federal standards. The ideal candidate will have experience in cybersecurity compliance and strong communication skills.

This is a hybrid position based in Washington, DC, requiring a detail-oriented individual to manage multiple compliance workstreams while engaging with various stakeholders.