Senior GRC Specialist: Governance, Risk & Compliance Lead

Minerva Cyber Tech; Columbia (MD); On-site; USD 90,000 - 130,000; Full time

Job summary

Minerva Cyber Technologies is seeking a Senior Governance, Risk, and Compliance (GRC) Specialist to help clients turn cybersecurity requirements into workable controls, reliable evidence, and clear risk decisions. You will coordinate governance, security authorization (ATO), audit readiness, and remediation tracking with technical teams and business stakeholders.

Join a team with deep hands-on cyber and national security experience, contributing to practical, outcomes-driven work and helping

Qualifications

• Senior-level experience delivering security governance, control assessment, audit, or authorization work.
• Working knowledge of NIST RMF and SP 800-53, and the security authorization lifecycle.
• Ability to evaluate evidence, document defensible findings, and coordinate remediation.
• Clear writing and experience leading discussions with technical teams and business stakeholders.

Responsibilities

• Maintain SSPs, control documentation, risk registers, and POA&Ms.
• Map compliance requirements to implemented controls and establish evidence collection routines.
• Coordinate assessment interviews, authorization packages, findings responses, and corrective actions.
• Review exceptions and residual risk with owners and prepare leadership reports.
• Connect continuous monitoring results to control status, remediation priorities, and authorization decisions.

Skills

Senior governance experience

Security governance

Audit readiness

Stakeholder communication

Job description

Minerva Cyber Technologies is seeking a Senior Governance, Risk, and Compliance (GRC) Specialist to help clients turn cybersecurity requirements into workable controls, reliable evidence, and clear risk decisions. You will coordinate governance, security authorization (ATO), audit readiness, and remediation tracking with technical teams and business stakeholders.

Join a team with deep hands-on cyber and national security experience, contributing to practical, outcomes-driven work and helping