GRC Analyst, Federal Compliance

Job Summary

GRC Analyst, Federal Compliance, is a full-time remote position responsible for overseeing security compliance for federal programs, particularly focusing on CMMC certification and FedRAMP readiness.

Key Responsibilities

• Lead the CMMC certification process and drive FedRAMP readiness efforts
• Conduct gap analysis and translate findings into actionable remediation tasks
• Serve as the primary liaison with external auditors during compliance assessments

Required Qualifications

• 5+ years of experience in GRC, compliance, or security, with 3 years focused on federal compliance frameworks
• Proven experience managing CMMC or FedRAMP compliance efforts
• Strong knowledge of CMMC Level 2 practices and scoping methodologies
• Ability to produce compliance documentation independently
• US citizenship and ability to obtain a federal Public Trust designation if required