Senior Security Compliance Engineer - GRC Lead (Hybrid)

Kelly Services; Atlanta (GA); Hybrid; USD 79,000 - 85,000; Full time

Job summary

Kelly Services is seeking a Senior Information Security Compliance Engineer to join our GRC team in Atlanta, GA on a 12-month contract. You will help ensure compliance with NIST, ISO, FedRAMP, PCI DSS, and other standards across government and enterprise environments.

You will assess controls, collect evidence, draft SSPs, and advise leadership on remediation and risk; strong communication and independence are essential for success in this role.

Qualifications

• Experience in IT auditing, security compliance, GRC, or related discipline.
• Knowledge of NIST SP 800-171 and related frameworks (NIST SP 800-53, CSF, ISO 27001/27002).
• Experience evaluating security controls and collecting audit evidence for compliance.
• Ability to interpret regulations and translate findings for leadership.
• Experience creating and maintaining security policies and compliance docs.
• Knowledge of security principles, cloud, risk management, and controls.

Responsibilities

• Support government cybersecurity compliance programs and align with regulatory requirements.
• Assess controls, collect evidence, identify gaps, and plan remediations.
• Research evolving regulations and summarize impact for senior leadership.
• Develop, maintain, and improve SSPs and compliance documentation for audits.
• Coordinate third-party risk assessments and security questionnaires with stakeholders.
• Collaborate with teams to implement controls and drive remediation.
• Identify opportunities to leverage AI for automation in compliance processes.

Skills

IT auditing

GRC

NIST SP 800-171

NIST SP 800-53

ISO 27001

Regulatory compliance

Risk assessments

Security controls

Job description

Kelly Services is seeking a Senior Information Security Compliance Engineer to join our GRC team in Atlanta, GA on a 12-month contract. You will help ensure compliance with NIST, ISO, FedRAMP, PCI DSS, and other standards across government and enterprise environments.

You will assess controls, collect evidence, draft SSPs, and advise leadership on remediation and risk; strong communication and independence are essential for success in this role.