Security & Compliance Engineer (GRC + Cloud)

Quest Oracle Community; Novi (MI); Hybrid; USD 100,000 - 121,000; Full time

Benefits offered by this job

Medical, dental & optical plans

Generous Paid Time Off

Tuition assistance

401K plan with employer contribution

Life, AD&D & disability coverage

Flexible work environment

Job summary

Altarum is seeking an experienced Security Compliance and Assurance professional to own our governance, risk, and compliance program. You will protect PII, PHI, and CUI, ensuring audit-ready processes and defensible outcomes across federal and state programs.

You will report to the Director of Security and Technology and collaborate with SAG, policy advisors, and the PHT team to integrate security into CI/CD, IaC, and cloud configurations.

Qualifications

• 5+ years in information security, including 2+ in a compliance‑focused role supporting NIST 800-171, NIST 800-53, FedRAMP, or HIPAA.
• Familiarity with cloud infrastructure security in AWS, Oracle, and/or Azure.
• CompTIA Security+ or higher certification (SSCP, CISSP, CISM, etc.).
• Bachelor's degree in a related field or equivalent experience.
• U.S. citizenship and eligibility for Public Trust.

Responsibilities

• Develop and maintain SSPs, POA&M, IR plans, and related policies and evidence.
• Prepare ATO packages and coordinate with client security offices and auditors.
• Maintain NIST 800-171 self-assessment and SPRS readiness for CMMC and client assessments.
• Monitor and report compliance posture with federal/state programs for government platforms.
• Support security in proposals and respond to security questionnaires from a reusable library.
• Run continuous monitoring across in-scope systems with POA&M updates.
• Lead security operations, including SOC, MDR, SIEM tuning, and vulnerability management.
• Integrate security controls into CI/CD pipelines and IaC reviews (Terraform, CloudFormation).
• Assist incident response and tabletop exercises; coordinate IR with vendors and clients.
• Manage AI security governance and vendor risk reviews in line with NIST RMF.

Skills

InfoSec experience

Cloud security

Certifications

Bachelor's degree

US Citizenship

GRC experience

Education

Bachelor's degree or higher

Tools

GitHub Actions

GitLab CI

Jenkins

Terraform

CloudFormation

Puppet

Job description

Altarum is seeking an experienced Security Compliance and Assurance professional to own our governance, risk, and compliance program. You will protect PII, PHI, and CUI, ensuring audit-ready processes and defensible outcomes across federal and state programs.

You will report to the Director of Security and Technology and collaborate with SAG, policy advisors, and the PHT team to integrate security into CI/CD, IaC, and cloud configurations.