SETA Engineer – Governance, Risk & Compliance (GRC)

Waypoint Human Capital; Chantilly (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

Waypoint Human Capital is recruiting for a SETA Engineer specializing in Governance, Risk, and Compliance (GRC) in Chantilly, VA. The role requires an Active Top Secret/SCI clearance with polygraph and IAM Level III certification.

The candidate will support the Cyber Assurance and Innovation Division with cybersecurity governance, risk assessments, and compliance across enterprise security architectures. The ideal candidate has 5+ years of cybersecurity experience, strong analytical and

Qualifications

• Bachelor's degree in a STEM field (CS, Cybersecurity, IT, Engineering)
• Active Top Secret/SCI clearance with Polygraph required
• Minimum five years' experience in cybersecurity, information systems security, governance, risk management, or related field
• Experience applying security engineering principles across system design and implementation

Responsibilities

• Provide SETA support to Cyber Assurance and Innovation Division focusing on governance, risk management, and enterprise security engineering
• Develop and implement cybersecurity governance frameworks, policies, standards, and compliance processes
• Assess enterprise systems, networks, and databases to identify security risks and compliance gaps
• Evaluate architectures and controls to ensure alignment with security requirements and mission objectives
• Provide technical guidance to government stakeholders on cybersecurity posture and risk-based decisions
• Prepare communications and briefings on risk assessments, compliance findings, and recommendations

Skills

Analytical thinking

Communication skills

Independent work

Troubleshooting

Problem-solving

Education

Bachelor's degree in Computer Science / Cybersecurity / IT / Engineering

Tools

IAM Level III

Job description

SETA Engineer – Governance, Risk & Compliance (GRC)

• Chantilly, VA

Position Title: SETA Engineer – Governance, Risk & Compliance (GRC)

Position Type: Full-Time, On-Site

Location: Chantilly, VA

Clearance: Active Top Secret/SCI with Polygraph

Waypoint's client is seeking an experienced Systems Engineering and Technical Assistance (SETA) Engineer specializing in Governance, Risk, and Compliance (GRC) to support the Cyber Assurance and Innovation Division. This position will provide technical expertise, cybersecurity engineering support, and advisory services to strengthen enterprise security governance, evaluate cybersecurity risks, and ensure information systems align with applicable security policies, standards, and compliance requirements.

The ideal candidate will possess a strong background in cybersecurity, information systems security engineering, and enterprise risk management, with the ability to assess security architectures, evaluate technical requirements, and provide actionable recommendations to government stakeholders. This individual must be capable of working independently, collaborating with multidisciplinary teams, and effectively communicating technical findings, risk assessments, and strategic recommendations to leadership.

Responsibilities

• Provide Systems Engineering and Technical Assistance (SETA) support to the Cyber Assurance and Innovation Division, focusing on cybersecurity governance, risk management, compliance, and enterprise security engineering.
• Support the development, evaluation, and implementation of cybersecurity governance frameworks, security policies, technical standards, and compliance processes.
• Apply security engineering principles throughout the system design, development, integration, and implementation lifecycle.
• Assess enterprise systems, networks, operating systems, and databases to identify potential security risks, vulnerabilities, and compliance gaps.
• Evaluate cybersecurity architectures, security controls, and technical designs to ensure alignment with organizational security requirements and mission objectives.
• Support cybersecurity risk assessments, security requirements analysis, and the development of risk mitigation strategies.
• Provide technical guidance and recommendations to government stakeholders regarding cybersecurity compliance, enterprise security posture, and risk-based decision-making.
• Review security documentation, technical assessments, and compliance artifacts to identify deficiencies and recommend corrective actions.
• Collaborate with systems engineers, cybersecurity professionals, program managers, and government stakeholders to integrate security requirements into enterprise solutions.
• Support the evaluation and implementation of cybersecurity controls in accordance with applicable federal security standards, policies, and risk management requirements.
• Analyze cybersecurity risks and compliance findings to identify trends, prioritize corrective actions, and recommend improvements to enterprise security processes.
• Provide independent technical assessments and advisory support to assist government leadership with cybersecurity planning, governance, and oversight activities.
• Prepare and deliver technical briefings, cybersecurity risk assessments, compliance findings, and recommendations to government leadership and other stakeholders.
• Work independently to manage assigned responsibilities, resolve technical challenges, and support program objectives with minimal oversight.
• Communicate effectively with cross-functional teams to ensure cybersecurity governance, risk management, and compliance considerations are incorporated into technical and operational decisions.

Required

• Active Top Secret/SCI clearance with Polygraph.
• IAM Level III certification in accordance with applicable DoD cybersecurity workforce requirements.
• Bachelor's degree or higher from an accredited institution, preferably in a STEM discipline such as Computer Science, Cybersecurity, Information Technology, Engineering, or a closely related technical field.
• Minimum of five (5) years of professional experience in cybersecurity, information systems security engineering, enterprise security, governance, risk management, compliance, or a closely related technical discipline.
• Demonstrated knowledge of network protocols, operating systems, and database security concepts and practices.
• Experience applying security engineering principles during system design, development, and implementation.
• Strong understanding of enterprise cybersecurity architectures, security controls, risk management methodologies, and compliance requirements.
• Ability to assess cybersecurity risks, evaluate technical security requirements, and provide practical engineering and risk mitigation recommendations.
• Experience reviewing technical security documentation, evaluating security controls, and identifying cybersecurity compliance gaps.
• Understanding of cybersecurity governance principles, security policies, and risk-based decision-making processes.
• Ability to provide technical guidance and advisory support to government stakeholders and multidisciplinary engineering teams.
• Strong analytical, troubleshooting, and problem-solving skills.
• Self-motivated professional capable of working independently and managing responsibilities with minimal supervision.
• Excellent interpersonal and communication skills, with the ability to collaborate effectively in a team-oriented environment.
• Ability to communicate complex technical information clearly and provide cybersecurity assessments, risk evaluations, compliance findings, and recommendations to technical teams, government stakeholders, and senior leadership as needed.