Remote GRC Analyst - Federal Cybersecurity & Compliance

SkyePoint Decisions

Bethesda (MD)

On-site

USD 80,000 - 100,000

Full time

14 days+

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Benefits offered by this job

Certification incentive program

PTO

Floating federal holiday options

Health insurance options (HMO/HDHP + H

401k matching

Job summary

SkyePoint Decisions is seeking a Governance, Risk & Compliance (GRC) Analyst to support a cybersecurity program and compliance initiatives by managing governance processes, risk management activities, policy compliance efforts, and audit readiness programs. The GRC Analyst serves as a key contributor to ensuring information systems and cybersecurity operations comply with Federal regulations, NIST standards and HHS policies.

This position is fully remote and requires U.S.

Qualifications

Bachelor's degree in Cybersecurity, Information Systems, Information Assurance, Business Administration, or a related field.
Minimum 5 years of experience in cybersecurity governance, risk management, compliance, audit support, or information assurance.
Experience supporting Federal cybersecurity programs and familiarity with NIST CSF, RMF, SP 800-53 Rev. 5, FISMA.

Responsibilities

Support governance and compliance activities within GRC platforms.
Maintain compliance records, risks, findings, and corrective action tracking.
Ensure data accuracy and completeness within governance systems.
Assist users with governance workflows and compliance processes.
Generate reports and metrics from GRC tools and repositories.
Support development, maintenance, and implementation of cybersecurity policies, procedures, standards, and guidelines.
Map organizational controls to Federal cybersecurity requirements and frameworks.
Maintain governance documentation and standards repositories.
Ensure policies and procedures remain aligned with Federal requirements.
Support policy reviews, updates, and compliance assessments.
Maintain and update cybersecurity risk registers.
Perform risk identification, analysis, and tracking activities.
Support risk assessments and risk mitigation planning.
Monitor remediation activities for identified risks and control deficiencies.
Develop and maintain cybersecurity compliance metrics and reporting.
Support creation of executive dashboards and compliance scorecards.
Analyze program performance indicators and identify trends.