Senior GRC & Cloud Compliance Lead

Deltek, Inc.; United States; On-site; USD 76,000 - 134,000; Full time

Job summary

Deltek, Inc. is seeking a Senior GRC Analyst to drive audit readiness, cloud security compliance, and risk management across SaaS and cloud environments. You will document controls, produce evidence packages, and report on remediation progress in partnership with Engineering, Product, and IT.

Reporting to the GRC Manager, you will lead audits and build executive-ready dashboards, with minimal supervision. Responsibilities include developing control narratives, maintaining SSPs, and guiding PoA&M

Qualifications

• 3+ years supporting audits & compliance work across common frameworks (SOC, NIST, ISO, FedRAMP, PCI)
• Experience with ITGC, IT risk management, cloud security & compliance
• Experience coordinating with government-related compliance efforts within cloud environments
• Hold or actively pursue security certifications (CISA, CISSP, CCSK/CCAK, cloud certs)

Responsibilities

• Lead or support audits and assessments for cloud SaaS applications across multiple frameworks.
• Manage scoping, evidence requests, control testing, remediation tracking and final report support.
• Develop and maintain control narratives, SSPs, evidence packages and status reporting.
• Translate control requirements into clear, testable expectations for technical teams.
• Own or back up key GRC programs, including policy management and client security due diligence.

Skills

Audit & compliance

Cloud security

Risk management

Documentation

Stakeholder communication

Project coordination

Analytical thinking

Education

B.S. degree in Information Security / CS / MIS

Job description

Deltek, Inc. is seeking a Senior GRC Analyst to drive audit readiness, cloud security compliance, and risk management across SaaS and cloud environments. You will document controls, produce evidence packages, and report on remediation progress in partnership with Engineering, Product, and IT.

Reporting to the GRC Manager, you will lead audits and build executive-ready dashboards, with minimal supervision. Responsibilities include developing control narratives, maintaining SSPs, and guiding PoA&M