Remote GRC Analyst - SOC 2 & GovRAMP Specialist

Infotech; Florida; Remote; USD 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Flexible time off and paid holidays

Zusammenfassung

Infotech is seeking a GRC Analyst to run the day-to-day work of SOC 2 Type II and GovRAMP programs, partnering with engineering, IT, and business teams to collect evidence, document controls, and close gaps. The role supports GovRAMP assessments and continuous monitoring across APHS and related products.

As part of the Security & Compliance (GRC) team, you will administer Vanta/Drata, draft security policies, and coordinate audits, with up to 10% travel and remote work within the US.

Qualifikationen

• 5+ years in GRC, security compliance, or IT audit.
• Experience writing security policies and control documentation.
• Familiarity with policy as code and AWS Config rules.
• Experience supporting GovRAMP/StateRAMP/FedRAMP programs and continuous monitoring.
• Administration of Vanta, Drata, or similar platforms.
• Ability to read AWS configuration evidence and identify good/bad configurations.

Aufgaben

• Run day-to-day work of SOC 2 Type II and GovRAMP programs.
• Collaborate with engineering, IT, and business teams to collect evidence and document controls.
• Close gaps and prepare evidence packages for audits.
• Coordinate penetration tests and track findings to closure.
• Manage POA&Ms and continuous monitoring deliverables.
• Assign and follow up on tasks with control owners across teams.

Kenntnisse

GRC experience

Security policies

Policy as code

GovRAMP/StateRAMP/FedRAMP

Vanta/Drata administration

AWS config/automation

Tools

Vanta

Drata

Open Policy Agent

Jobbeschreibung

Infotech is seeking a GRC Analyst to run the day-to-day work of SOC 2 Type II and GovRAMP programs, partnering with engineering, IT, and business teams to collect evidence, document controls, and close gaps. The role supports GovRAMP assessments and continuous monitoring across APHS and related products.

As part of the Security & Compliance (GRC) team, you will administer Vanta/Drata, draft security policies, and coordinate audits, with up to 10% travel and remote work within the US.