Public Sector GRC Analyst - FedRAMP and Compliance

Apply; Washington, Northern (District of Columbia, KY); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Socure is hiring an Analyst, GRC – Public Sector to own governance, risk, and compliance operations for its public sector business. You will run FedRAMP/GovRAMP continuous monitoring, manage a POA&M, and coordinate evidence collection with multiple teams.

The role grows to drafting customer-facing compliance content, pursuing automation-first improvements, and developing machine-readable formats like OSCAL to reduce manual effort.

Qualifications

• 4+ years of hands-on cybersecurity, compliance, or identity-management experience, including FedRAMP/GovRAMP or comparable continuous-monitoring work.
• Direct experience with FedRAMP, GovRAMP, and NIST frameworks (800-53, 800-63, 800-171).
• Proven ability to perform continuous monitoring, vulnerability remediation, and compliance reporting.
• Ability to design repeatable compliance processes and leverage AI tools to accelerate work.
• Strong written and verbal communication for customer-facing narratives.

Responsibilities

• Coordinate external 3PAO assessments and respond to auditor requests for evidence and documentation.
• Maintain FedRAMP and GovRAMP controls and documentation per NIST and related frameworks.
• Prepare certification packages and maintain System Security Plans and appendices.
• Build system-generated evidence and trackers to enable scalable compliance operations.
• Design automation-first monitoring programs and lead vulnerability management lifecycle.

Skills

FedRAMP experience

GovRAMP experience

Continuous monitoring

AI tools familiarity

Education

4+ years cybersecurity, compliance, or identity-management

Tools

Wiz

Burp Suite

AWS security services

OSCAL

Job description

Socure is hiring an Analyst, GRC – Public Sector to own governance, risk, and compliance operations for its public sector business. You will run FedRAMP/GovRAMP continuous monitoring, manage a POA&M, and coordinate evidence collection with multiple teams.

The role grows to drafting customer-facing compliance content, pursuing automation-first improvements, and developing machine-readable formats like OSCAL to reduce manual effort.