Sr GRC Security Engineer

ACL Digital; Atlanta (GA); On-site; USD 120,000 - 160,000; Full time

Job summary

ACL Digital seeks a Sr. Security Engineer (Governance, Risk & Compliance) to support the government compliance program, ensuring regulatory alignment and audit readiness across IT and security controls.

You'll develop and maintain SSPs, respond to third-party risk questionnaires, and interpret new regulatory requirements for leadership while strengthening the organization’s security posture. Required: deep knowledge of NIST SP 800-171/800-53, ISO 27001/27002, strong written/verbal skills, and

Qualifications

• Experience in IT audit and evidence collection for regulatory compliance.
• Deep understanding of NIST SP 800-171 or comparable frameworks (e.g., NIST SP 800-53, NIST CSF, ISO/IEC 27001/27002, FedRAMP, PCI DSS, CIS CSC).
• Experience with U.S. Government IT compliance requirements.
• Experience developing System Security Plans (SSPs).
• Strong written and verbal communication skills across multiple channels.
• Ability to work independently and deliver actionable results.
• Knowledge of information security, network architecture, and cloud computing.

Responsibilities

• Support the government compliance program and regulatory alignment.
• Develop and maintain documentation for audit readiness and procedures.
• Respond to third-party risk management questionnaires.
• Research and interpret new regulatory requirements for leadership.
• Assist with information security compliance activities to strengthen posture.

Skills

GRC experience

IT audit

NIST SP 800-171

NIST SP 800-53

SSP development

Policy drafting

Regulatory research

Technical writing

Cloud & network security

Independent work

Job description

NOTE: Need local candidate who can be available for in-person interview.

Job Title: Sr. Security Engineer (Governance, Risk & Compliance)

Job Description:

Overview:

This role is primarily responsible for supporting the organization’s government compliance program, ensuring adherence to applicable foreign and domestic regulatory requirements and maintaining alignment with mandated cybersecurity and IT compliance frameworks. In support of this mission, the position also contributes to broader Information Security Compliance efforts by executing special projects driven by evolving regulatory and cybersecurity requirements, processing and responding to third-party risk management questionnaires, developing and maintaining documentation of processes and procedures to support audit readiness and operational consistency, and assisting with additional Information Security Compliance activities as needed to strengthen the organization’s overall compliance posture.

Required Qualifications:

• Demonstrated experience in Information Technology audit, with the ability to identify, evaluate, and validate control evidence sufficient to support and demonstrate compliance with regulatory and industry requirements.
• Deep understanding of NIST SP 800-171 or comparable control frameworks (e.g., NIST SP 800-53, NIST Cybersecurity Framework, ISO/IEC 27001/27002, FedRAMP, PCI DSS, or CIS Critical Security Controls), with the ability to rapidly apply control-based concepts across regulatory environments.
• Prior experience with U.S. Government IT compliance requirements
• Experience developing and maintaining System Security Plans (SSPs)
• Ability to research and interpret new regulatory requirements, providing concise summaries to senior leadership
• Strong written and verbal communication skills across multiple channels and organizational levels
• Self-starter with the ability to work independently and deliver clear, actionable results
• Demonstrated passion for learning and applying government compliance standards
• Skilled in drafting and interpreting policies and procedures
• Proficient in identifying, implementing, and managing security controls
• Knowledgeable in collecting and interpreting evidence and artifacts for audits and assessments
• Solid grasp of IT domains including information security, network architecture, and cloud computing
• Prior experience in Governance, Risk & Compliance (GRC) organization or comparable role

Preferred Qualifications:

• Prior experience with U.S. Government IT compliance requirements
• Experience developing and maintaining System Security Plans (SSPs)
• Project management experience and ability to drive action across functional areas
• Foundational understanding of emerging AI tools and technologies, with the ability to evaluate their application for enhancing productivity and automation while identifying associated risks, potential misuse, and impacts to the organization’s security and compliance posture
• Experience in the aviation industry

Certifications (Anyone):

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified in Risk and Information Systems Control (CRISC)