Public Sector GRC Analyst – FedRAMP & Compliance

United States Digital Space LLC; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Socure seeks an Analyst, GRC – Public Sector to own governance, risk, and compliance for its public sector business. You will manage FedRAMP/GovRAMP continuous monitoring, POA&M, access reviews, and evidence collection across Security, Engineering, IT, DevOps, Legal and Product.

As you grow, you will draft customer-facing compliance content, pursue automation-first improvements (OSCAL, AI workflows) and contribute to audit readiness and scalable processes.

Qualifications

• 4+ years of hands-on cybersecurity, compliance, or identity-management experience including FedRAMP/GovRAMP.
• Direct experience with FedRAMP, GovRAMP, and NIST 800-53/800-63/800-171.
• Proven ability to execute continuous monitoring, vulnerability remediation, and compliance reporting.
• Strong written and verbal communication for customer-facing content.
• U.S. Person residing in the United States and able to obtain a U.S. OPM NACI clearance.

Responsibilities

• Coordinate external 3PAO assessments and respond to auditor requests for evidence.
• Maintain FedRAMP and GovRAMP controls and documentation, including SSPs.
• Replace manual evidence collection with system-generated evidence and build trackers.
• Lead FedRAMP continuous monitoring, including vulnerability remediation and validation.
• Design automation-first and AI-enabled workflows to reduce manual effort.
• Support public sector sales with persuasive security narratives.
• Monitor evolving requirements and updates to standards (NIST, FedRAMP).

Skills

Cybersecurity

Compliance

Identity management

FedRAMP

GovRAMP

NIST 800-53

AI tools

Tools

Wiz

Burp Suite

AWS

Job description

Socure seeks an Analyst, GRC – Public Sector to own governance, risk, and compliance for its public sector business. You will manage FedRAMP/GovRAMP continuous monitoring, POA&M, access reviews, and evidence collection across Security, Engineering, IT, DevOps, Legal and Product.

As you grow, you will draft customer-facing compliance content, pursue automation-first improvements (OSCAL, AI workflows) and contribute to audit readiness and scalable processes.