Top 221 Senior governance risk & compliance (grc) analyst Jobs

Senior Governance Risk and Compliance (GRC) Analyst
C2 Labs, Inc. —Remote
- Remote
- Pass drug screening
- 8 years
- Team management
Quick Apply
4d
CBGC Senior Control Testing Analyst - Omaha, Nebraska
PenFed Credit Union —Omaha, NE
- $23.28 - $49.05 an hour
- Overtime
- CPA
- 5 years
- Office
- Paid parental leave
- Disability insurance
CBGC Senior Control Testing Analyst - San Antonio, Texas
PenFed Credit Union —San Antonio, TX
- $23.28 - $49.05 an hour
- Overtime
- CPA
- 5 years
- Office
- Paid parental leave
- Disability insurance
CBGC Senior Control Testing Analyst
PenFed Credit Union —McLean, VA
- $23.28 - $49.05 an hour
- Overtime
- CPA
- 5 years
- Office
- Paid parental leave
- Disability insurance
Information Security GRC – Risk & Compliance Senior Analyst (Contract)
AlixPartners —Southfield, MI
- Full-time
- Hybrid work
- HIPAA
- English
- Mid-level
Senior GRC Analyst
Workato —Remote
- Remote
- Azure
- Computer Science
- 8 years
Quick Apply
Senior Security Compliance Analyst
OneStudyTeam —Boston, MA
- $110,000 - $140,000 a year
- Remote
- Computer science
- Computer Science
- Pass drug screening
Quick Apply
Senior GRC Analyst
Clayco —Phoenix, AZ
- Full-time
- Background check
- 5 years
- Residential
- Paid holidays
- Disability insurance
Quick Apply
Senior Analyst, Information Security Governance, Risk, & Compliance
AltaMed Health Services Corporation —Commerce, CA
- $121,780.05 - $152,225.07 a year
- Full-time
- Background check
- 5 years
- HIPAA
- 403(b) matching
- Paid holidays
Senior GRC Analyst, Hybrid TX
Amynta Group —Dallas-Fort Worth, TX
- Full-time
- Hybrid work
- Office
- Analysis skills
- Bachelor's degree
Cybersecurity Compliance Analyst
DigiFlight —Columbia, MD
- Full-time
- Microsoft Excel
- Mid-level
- 3 years
Quick Apply
Senior GRC Analyst
Morgan & Morgan, P.A. —Orlando, FL
- Full-time
- Computer science
- Computer Science
- Bachelor's degree
- Paid holidays
- Health insurance
Quick Apply
12d
Senior Risk & Compliance Analyst
WHOOP —Boston, MA
- $130,000 - $170,000 a year
- Full-time
- 6 years
- HIPAA
- Office
GRC SECURITY ANALYST
Clear Capital | CubiCasa —Remote
- $114,000 - $139,000 a year
- Full-time
- Remote
- DevOps
- 3 years
- Master's degree
- Profit sharing
- AD&D insurance
Quick Apply
Senior Technical Compliance Analyst
QTS Data Centers —Groningen, MN
- Microsoft Excel
- 6 years
- Bachelor's degree
- Health insurance
- Pet insurance
Governance, Risk & Compliance Analyst
University of Nebraska System —Lincoln, NE
- From $71,800 a year
- Full-time
- Hybrid work
- HIPAA
- Mid-level
- 3 years
- Paid holidays
- Retirement plan
Senior Compliance and Risk Analyst
Calendly —Remote
- $198,238 - $233,221 a year
- Full-time
- Hybrid work
- 5 years
- HIPAA
- Continuous improvement
Quick Apply
13d
Senior Information Security & GRC Analyst - 2 positions (Hybrid)
State Corporation Commission —Richmond, VA
- $75,000 - $100,000 a year
- Multiple hires
- Hybrid work
- Office
- Continuous improvement
- Mentoring
Compliance Analyst
Commvault —Remote
- $54,400 - $120,750 a year
- Email
- Remote
- HIPAA
- Mid-level
- In-person
- Opportunities for advancement
10d
Senior Compliance Analyst – Continuous Compliance Framework (Hybrid - Seattle)
Nordstrom —Seattle, WA
- $142,000 - $220,500 a year
- Computer science
- Computer Science
- Writing skills
- Store discount
- Disability insurance

I want to receive the latest job alert for senior governance risk & compliance (grc) analyst

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

senior governance risk & compliance (grc) analyst jobs near

Senior Compliance Officer jobs in Boston, MA

Senior Compliance Officer jobs in Seattle, WA

Senior Information Security Analyst jobs in Richmond, VA

Compliance Officer jobs in Remote

Senior Analyst jobs in Phoenix, AZ

Compliance Officer jobs in Lincoln, NE

Cybersecurity Analyst jobs in Columbia, MD

Security Analyst jobs in Remote

Senior Compliance Officer jobs in Remote

Information Security Analyst jobs in Southfield, MI

Senior Analyst jobs in Orlando, FL

Senior Test Analyst jobs in San Antonio, TX

Senior Analyst jobs in Remote

Compliance Training Officer jobs in New York, NY

Legal Compliance Internship jobs in New York, NY

Compliance Analyst jobs in Chicago, IL

Senior Compliance Officer jobs in Mebane, NC

Senior Compliance Officer jobs in Mount Pleasant, PA

Senior Compliance Officer jobs in Moon Township, PA

Senior Compliance Officer jobs in South Fulton, GA

Senior Governance Risk and Compliance (GRC) Analyst

C2 Labs, Inc.
Remote

Quick Apply

Job Details

4 days ago

Qualifications

Content creation for technical audiences
Customer relationship building
FedRAMP
Vulnerability scanning implementation
Incident management
NIST SP 800-53
Technical documentation
Client rapport building
IT system monitoring
Compliance audits & assessments
Cloud-based systems
Compliance documentation
Client management
Regulatory Frameworks (Architecture security)
Vulnerability scanning
IT governance planning
Vulnerability management
Cloud compliance
Regulatory compliance analysis
Technical writing experience within technology
RMF
Information security auditing
IT consulting
IT security monitoring

Full Job Description

Job Summary:

As a Senior Governance Risk and Compliance (GRC) Analyst at C2 Labs you will lead a team of security analysts and engineers to implement regulatory frameworks such as the Federal Information Security Modernization Act (FISMA), the Federal Risk Authorization Management Program (FedRAMP) and the State Risk Authorization Management Program (StateRAMP). You will leverage GRC tools to develop security authorization package documentation such as the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), and the Plan of Actions & Milestones (POA&M) in human readable and machine-readable formats. You will serve as a Subject Matter Expert (SME) at key stakeholder meetings and will develop and maintain client relationships. You will draft security control implementation statements with enough detail to facilitate the testing of the controls and will develop supporting documentation including the Contingency Plan (CP), Incident Response Plan (IRP), and Configuration Management Plan (CMP). As a Senior GRC Analyst your primary responsibility will be to ensure the timely development of the security authorization package in accordance with C2 Labs quality standards. You will be expected to lead multiple teams and will work on up to 2 packages at a time.

Job Responsibilities:

Categorize systems in accordance with Federal Information Processing Standards (FIPS) 199 and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-60. Select and tailor security controls by applying scoping guidance in accordance with NIST SP 800-53 and FedRAMP specific guidance. Document the implementation characteristics for security controls with enough detail to permit the testing of the security control by an independent assessor/Third Party Assessment Organization (3PAO).

Develop, review, and update security authorization package documentation to include the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), and Plan of Actions and Milestones (POA&M).
Develop, review, and update supporting documentation including the Contingency Plan (CP), Incident Response Plan (IRP), and Configuration Management Plan (CMP).
Conduct Security Impact Assessments (SIAs) on changes to information systems.
Create the Control Implementation Summary (CIS)/Customer Responsibility Matrix (CRM) workbook outline Cloud Service Provider (CSP) and customer responsibilities.
Develop, review, and update policies and procedures to support the implementation of the NIST 800-53 control families.
Leverage the next generation of Governance Risk and Compliance (GRC) tools to automate the creation of the SSP.
Review current security assessment and authorization processes and provide recommendations for improvement.
Develop Risk Assessment Reports (RAR).
Provide guidance on NIST 800-53, FedRAMP, and StateRAMP control requirements.
Develop and deliver training to educate stakeholders on the various tasks and activities associated with the RMF.

Qualifications:

Minimum 8 years’ experience in IT consulting specializing in Governance, Risk, and Compliance using the RMF.
CISSP, CISM, or CAP certification, or equivalent preferred
Excellent communication and interpersonal skills, with the ability to build a rapport and trust with clients.
Knowledge of the cybersecurity industry to include regulatory frameworks such as the National Institute of Standards in Technology (NIST) Risk Management Framework (RMF), Federal Risk Authorization Management Program (FedRAMP), Department of Defense (DoD) Impact Levels (2-6), and the State Risk Authorization Management Program (StateRAMP).
Possesses an in-depth understanding of the FedRAMP authorization process and associated templates and deliverables.
Must have extensive experience creating security authorization package documentation (i.e., SSP, SAP. SAR, & POA&M) and managing system authorization artifacts for a FedRAMP authorized cloud environment.

Working knowledge of:

NIST SP 800-53 Security and Privacy Controls for Federal Information Systems and Organizations
FedRAMP Security Controls Baselines (i.e., Low, Moderate, High, and Li-SaaS)
StateRAMP Security Control Baselines (i.e., Low Impact Ready, Low Impact Authorized, Moderate Impact Ready, Moderate Impact Authorized)
NIST SP 800-37 Guide for Applying the Risk Management Framework to Federal Information Systems
Must have strong technical writing skills.
Must be able to work independently under only general direction.
Must be able to interpret and provide consulting expertise on FedRAMP security requirements.
Will serve as an RMF Subject Matter Expert (SME) at key stakeholder meetings.
Must have extensive knowledge in reviewing, analyzing, and documenting the secure implementation of logical controls, physical controls, environmental controls, personnel security, and incident handling.
Experience preparing monthly continuous monitoring deliverables (e.g., vulnerability scans, POA&Ms, and asset inventory) for submission to the FedRAMP PMO.
Must be a US Citizen and capable of passing a Public Trust background investigation.

EEO Statement

We are an equal opportunity employer. All qualified applicants will be considered without discrimination based on race, color, religion, sex, national origin, age, disability, or protected veteran status. Employment offers will be contingent on passing a pre-employment drug screen.

Practical AI Application

Applies AI tools to streamline workflows, enhance decision-making, and improve outcomes
Understands the strengths and limitations of AI systems and exercises sound judgment in their use
Continuously explores new AI capabilities and integrates them into day-to-day work where appropriate
Uses AI in alignment with company and customer-specific policies, data privacy standards, and ethical guidelines
Exercises discretion when using AI with sensitive or proprietary information
Demonstrates awareness of bias, accuracy, and risk considerations when leveraging AI tools

Quick Apply

Refine Your Search

senior governance risk & compliance (grc) analyst jobs

Senior Governance Risk and Compliance (GRC) Analyst

CBGC Senior Control Testing Analyst - Omaha, Nebraska

CBGC Senior Control Testing Analyst - San Antonio, Texas

CBGC Senior Control Testing Analyst

Information Security GRC – Risk & Compliance Senior Analyst (Contract)

Senior GRC Analyst

Senior Security Compliance Analyst

Senior GRC Analyst

Senior Analyst, Information Security Governance, Risk, & Compliance

Senior GRC Analyst, Hybrid TX

Cybersecurity Compliance Analyst

Senior GRC Analyst

Senior Risk & Compliance Analyst

GRC SECURITY ANALYST

Senior Technical Compliance Analyst

Governance, Risk & Compliance Analyst

Senior Compliance and Risk Analyst

Senior Information Security & GRC Analyst - 2 positions (Hybrid)

Compliance Analyst

Senior Compliance Analyst – Continuous Compliance Framework (Hybrid - Seattle)

I want to receive the latest job alert for senior governance risk & compliance (grc) analyst

Related Searches

Explore jobs in more locations

Job Seeker Tools

Employer Tools

Browse

Stay Connected