Remote Senior GRC Analyst: GovRAMP & CJIS Expert

Lexipol; United States; Remote; USD 105,000 - 115,000; Full time

Job summary

Lexipol is seeking a Senior GRC Analyst to own the security audit program end-to-end, including GovRAMP from readiness to assessment, with CJIS and SOC 2 in scope.

You will partner with engineering, IT, and product teams, translate audit requirements into practical safeguards, and report audit status to leadership while maintaining ongoing control health.

This is a fully remote role based in the United States, requiring CJIS eligibility and US citizenship.

Qualifications

• 5+ years in information security compliance, IT audit, or GRC with hands-on audit experience.
• Experience with NIST 800-53 Rev. 5 & GovRAMP is highly sought.
• Knowledge of CJIS, GovRAMP, SOC 2, and NIST 800-53 Rev. 5 (Moderate) baselines.
• Ability to build or maintain a cross-framework control framework or matrix.
• Lead audits from planning through final report with auditor coordination.
• Strong written/spoken communication; capable of explaining controls to non-tech stakeholders.
• Excellent organization and ability to manage multiple audits and deadlines.

Responsibilities

• Own end-to-end planning and execution of SOC 2 and CJIS audits.
• Lead GovRAMP authorization from readiness to final assessment.
• Maintain control framework mapping across CJIS, GovRAMP, SOC 2, and NIST 800-53 Rev. 5 (Moderate).
• Establish repeatable evidence-collection and control-testing processes.
• Advise engineering, IT, and product on controls and safeguards.
• Track findings and remediation to closure; report status to leadership.

Skills

Information security

IT audit

GRC

Audit leadership

Communication

Job description

Lexipol is seeking a Senior GRC Analyst to own the security audit program end-to-end, including GovRAMP from readiness to assessment, with CJIS and SOC 2 in scope.

You will partner with engineering, IT, and product teams, translate audit requirements into practical safeguards, and report audit status to leadership while maintaining ongoing control health.

This is a fully remote role based in the United States, requiring CJIS eligibility and US citizenship.