Public Sector GRC Analyst — FedRAMP & Automation

Socure; Washington (District of Columbia); Híbrido; USD 110 000 - 150 000; Tempo integral

Resumo da oferta

Socure seeks an Analyst, GRC – Public Sector to own day-to-day governance, risk, and compliance operations for the public sector. You’ll run FedRAMP/GovRAMP monitoring, build POA&Ms, manage evidence collection with cross-functional teams, and draft customer-facing content for audits and RFPs.

The role grows toward automation-first workflows and OSCAL-based documentation. You will advance program readiness, coordinate with Security, Engineering, IT, DevOps, Legal, and Sales, and contribute to a

Qualificações

• 4+ years in cybersecurity, compliance, or identity management with FedRAMP/GovRAMP experience.
• Direct work with FedRAMP, GovRAMP, and NIST 800-53/800-63/800-171.
• Proven ability to execute continuous monitoring, remediation, and reporting.
• Ability to design repeatable compliance processes; familiarity with OSCAL and AI-accelerated work is a plus.
• Strong written and verbal communication for customer-facing writing.
• U.S. person residing in the United States and able to obtain NACI clearance.

Responsabilidades

• Coordinate and execute 3PAO assessments and respond to auditor requests.
• Maintain FedRAMP/GovRAMP controls and documentation per NIST frameworks.
• Prepare SSP and related certification packages with dynamic, system-driven evidence.
• Design automation-first continuous monitoring with integrations and real-time data.
• Lead access reviews, incident drills, and contingency testing.
• Develop training and scalable workflows for compliance operations.
• Support public sector sales with Persuasive, policy-aligned narratives.

Conhecimentos

FedRAMP/GovRAMP

NIST SP 800-53

Continuous monitoring

Vulnerability remediation

Automation / AI tools

Strong communication

Customer-facing

Ferramentas

OSCAL

Wiz

Burp Suite

AWS

Descrição da oferta de emprego

Socure seeks an Analyst, GRC – Public Sector to own day-to-day governance, risk, and compliance operations for the public sector. You’ll run FedRAMP/GovRAMP monitoring, build POA&Ms, manage evidence collection with cross-functional teams, and draft customer-facing content for audits and RFPs.

The role grows toward automation-first workflows and OSCAL-based documentation. You will advance program readiness, coordinate with Security, Engineering, IT, DevOps, Legal, and Sales, and contribute to a