Senior GRC & GovRAMP Compliance Lead (Remote)

Lexipol; Texas; Remote; USD 105,000 - 115,000; Full time

Benefits offered by this job

Remote work

401(k) with company match

Bonus program

Job summary

Lexipol is seeking a Senior GRC Analyst to own Lexipol's security audit program end-to-end, including SOC 2, CJIS, and GovRAMP initiatives.

The role reports to the VP of Internal Technology; US citizenship is required for CJIS and this is a fully remote role for candidates based in the United States.

You will build a repeatable control framework, coordinate with engineering and IT, and drive remediation of audit findings to deliver trusted security for public safety customers.

Qualifications

• 5+ years in information security compliance, IT audit, or GRC with hands-on audit experience.
• Experience with NIST 800-53 Rev.5 and GovRAMP preferred.
• Ability to map controls across CJIS, GovRAMP, SOC 2, and NIST 800-53 Rev. 5.
• Able to lead audits from planning to final report with minimal supervision.
• Strong written and verbal communication for leadership updates.

Responsibilities

• Own end-to-end planning and execution of SOC 2 and CJIS audits and GovRAMP readiness.
• Maintain CJIS authorization for product lines and ensure no lapses.
• Design and maintain a shared control framework across multiple regimes.
• Perform ongoing control testing and self-assessments between audits.
• Collaborate with Engineering, IT, DevOps, and Product to implement safeguards.
• Track findings and remediation to closure; report risk to leadership.

Skills

GRC/audit management

NIST 800-53 Rev.5

GovRAMP/FedRAMP

CJIS Security Policy

Security controls

Stakeholder communication

Independent audit leadership

Job description

Lexipol is seeking a Senior GRC Analyst to own Lexipol's security audit program end-to-end, including SOC 2, CJIS, and GovRAMP initiatives.

The role reports to the VP of Internal Technology; US citizenship is required for CJIS and this is a fully remote role for candidates based in the United States.

You will build a repeatable control framework, coordinate with engineering and IT, and drive remediation of audit findings to deliver trusted security for public safety customers.