Senior GRC Security Engineer: Compliance & Audit Lead

ACL Digital; Atlanta (GA); On-site; USD 120,000 - 160,000; Full time

Job summary

ACL Digital seeks a Sr. Security Engineer (Governance, Risk & Compliance) to support the government compliance program, ensuring regulatory alignment and audit readiness across IT and security controls.

You'll develop and maintain SSPs, respond to third-party risk questionnaires, and interpret new regulatory requirements for leadership while strengthening the organization’s security posture. Required: deep knowledge of NIST SP 800-171/800-53, ISO 27001/27002, strong written/verbal skills, and

Qualifications

• Experience in IT audit and evidence collection for regulatory compliance.
• Deep understanding of NIST SP 800-171 or comparable frameworks (e.g., NIST SP 800-53, NIST CSF, ISO/IEC 27001/27002, FedRAMP, PCI DSS, CIS CSC).
• Experience with U.S. Government IT compliance requirements.
• Experience developing System Security Plans (SSPs).
• Strong written and verbal communication skills across multiple channels.
• Ability to work independently and deliver actionable results.
• Knowledge of information security, network architecture, and cloud computing.

Responsibilities

• Support the government compliance program and regulatory alignment.
• Develop and maintain documentation for audit readiness and procedures.
• Respond to third-party risk management questionnaires.
• Research and interpret new regulatory requirements for leadership.
• Assist with information security compliance activities to strengthen posture.

Skills

GRC experience

IT audit

NIST SP 800-171

NIST SP 800-53

SSP development

Policy drafting

Regulatory research

Technical writing

Cloud & network security

Independent work

Job description

ACL Digital seeks a Sr. Security Engineer (Governance, Risk & Compliance) to support the government compliance program, ensuring regulatory alignment and audit readiness across IT and security controls.

You'll develop and maintain SSPs, respond to third-party risk questionnaires, and interpret new regulatory requirements for leadership while strengthening the organization’s security posture. Required: deep knowledge of NIST SP 800-171/800-53, ISO 27001/27002, strong written/verbal skills, and