Remote GRC Analyst - RMF & Compliance (Entry-Level)

Securepro Inc; Washington (District of Columbia); On-site; USD 65,000 - 95,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Job summary

SecurePro is seeking a motivated and detail-oriented Associate Governance, Risk, and Compliance (GRC) Analyst to support a federal cybersecurity program in Washington, DC. The team works on governance, risk management, and compliance across ~32 FISMA Moderate information systems and collaborates with Senior/Lead ISSOs to support audits and documentation.

The ideal candidate has strong organizational and analytical skills, a basic understanding of cybersecurity concepts, and an interest in

Qualifications

• Bachelor's degree in cybersecurity, IT, CS, IS, business, or related field.
• Academic coursework, internships, or professional exposure to cybersecurity, IT auditing, risk management, or regulatory compliance.
• Familiarity with NIST SP 800-53, NIST SP 800-37, FISMA, or RMF.
• Basic understanding of security assessments, compliance reviews, or authorization processes.
• Familiarity with SSPs, POA&Ms, or security control documentation.
• Exposure to CSAM, ServiceNow, Splunk, or other cybersecurity and compliance management tools.
• Familiarity with vulnerability management tools such as Tenable Nessus, Qualys, or ACAS.

Responsibilities

• Assist with day-to-day cybersecurity governance, risk management, and compliance activities supporting federal information systems.
• Support RMF activities in accordance with NIST SP 800-37 and applicable federal cybersecurity requirements.
• Collect, organize, and maintain cybersecurity documentation, assessment records, and compliance evidence.
• Assist with maintaining System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and other security documentation.
• Track security findings, remediation activities, action items, and compliance deadlines.
• Support the maintenance of cybersecurity records and authorization information in CSAM or other Governance, Risk, and Compliance (GRC) platforms.

Skills

Organizational skills

Analytical skills

Attention to detail

Interest in federal frameworks

Education

Bachelor's degree in Cybersecurity, IT, CS, IS, Business, or related field

Tools

CSAM

ServiceNow

Splunk

Tenable Nessus

Qualys

ACAS

Job description

SecurePro is seeking a motivated and detail-oriented Associate Governance, Risk, and Compliance (GRC) Analyst to support a federal cybersecurity program in Washington, DC. The team works on governance, risk management, and compliance across ~32 FISMA Moderate information systems and collaborates with Senior/Lead ISSOs to support audits and documentation.

The ideal candidate has strong organizational and analytical skills, a basic understanding of cybersecurity concepts, and an interest in