Security Compliance Engineer: GRC, DevSecOps & Audit Readiness

Altarum; Novi (MI); Hybrid; USD 100,000 - 121,000; Full time

Benefits offered by this job

Medical, dental & optical plans

Paid time off

Tuition assistance

401K plan

Life, AD&D & Disability

Flexible work environment

Job summary

Altarum seeks a Security Compliance and Assurance lead to own the organization's GRC program and security operations. You will oversee documentation, ATO readiness, and client/security assessments while coordinating with the SAG, policy advisors, and PHT teams.

You will drive continuous monitoring, vulnerability management, and DevOps security practices across AWS/Azure environments, ensuring risk-based decisions and audit readiness in a hybrid Novi, MI setting.

Qualifications

• 5+ years in information security, including at least 2 years in a compliance-focused role supporting NIST 800-171, NIST 800-53, FedRAMP, or HIPAA
• Familiarity with cloud infrastructure security in AWS, Oracle, and/or Azure
• CompTIA Security+ or higher (SSCP, CGRC, CISSP, or CISM)
• Bachelor's degree in a related field or equivalent experience
• U.S. citizenship and ability to obtain Public Trust eligibility

Responsibilities

• Maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), the Incident Response Plan, and related policies and evidence
• Prepare ATO packages and liaise with client security offices and auditors
• Maintain NIST SP 800-171 self-assessment and SPRS score for audits
• Track compliance with FedRAMP, CMMC, TX-RAMP, and StateRAMP for government platforms
• Review and respond to security questionnaires with a reusable library
• Run continuous monitoring across in-scope systems and update POA&Ms
• Conduct internal control readiness reviews before external assessments
• Report security posture with metrics and risk-based recommendations
• Manage SOC, MDR, and SIEM; coordinate vulnerability and patch management
• Review infrastructure-as-code and cloud configurations for security hardening
• Support CI/CD security controls and AI risk governance

Skills

Information security

GRC governance

Cloud security

Auditing

Education

Bachelor's degree in a related field

Tools

Terraform

CloudFormation

Puppet

PowerShell

Python

Job description

Altarum seeks a Security Compliance and Assurance lead to own the organization's GRC program and security operations. You will oversee documentation, ATO readiness, and client/security assessments while coordinating with the SAG, policy advisors, and PHT teams.

You will drive continuous monitoring, vulnerability management, and DevOps security practices across AWS/Azure environments, ensuring risk-based decisions and audit readiness in a hybrid Novi, MI setting.