SOC 2 & GovRAMP GRC Specialist (Remote)

Infotech; Oregon; Híbrido; USD 110.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Flexible time off

Continuing education

Inclusive culture

Descripción de la vacante

Infotech is seeking a GRC Analyst to run SOC 2 Type II and GovRAMP programs, partnering with engineering, IT, and business teams to collect evidence, document controls, and close gaps.

The role involves ownership of SOC 2 Type II evidence collection, GovRAMP support, policy drafting, and coordinating across multiple teams to ensure compliance and readiness for audits. Fully remote within the United States.

Formación

• 5+ years in GRC, security compliance, or IT audit.
• Led at least one SOC 2 Type II or GovRAMP cycle.
• Experience writing security policies and control documentation.
• Coordinate deliverables across several teams with minimal direction.
• Familiarity with policy as code and AWS Config rules.
• Clear communication with auditors, engineers, and executives.
• Ability to lead investigations of security incidents.

Responsabilidades

• Own SOC 2 Type II evidence collection and readiness each audit cycle.
• Support GovRAMP assessments including evidence packages and POA&M.
• Draft and maintain security policies and control narratives aligned with SOC 2 and NIST.
• Administer Vanta/Drata and automate evidence collection to reduce manual work.
• Perform risk and third-party assessments; verify AWS controls.
• Coordinate penetration tests and track findings to closure.
• Provide backup coverage for audit and assessment activity.

Conocimientos

GRC experience

SOC 2 ownership

Policy writing

Cross-team coordination

Policy as code

Auditor communication

Incident response

Educación

Certifications

Herramientas

Vanta/Drata

AWS Config

Automation scripts

Descripción del empleo

Infotech is seeking a GRC Analyst to run SOC 2 Type II and GovRAMP programs, partnering with engineering, IT, and business teams to collect evidence, document controls, and close gaps.

The role involves ownership of SOC 2 Type II evidence collection, GovRAMP support, policy drafting, and coordinating across multiple teams to ensure compliance and readiness for audits. Fully remote within the United States.