Technical GRC Consultant

• Working remotely in support of a GRC effort to move legacy ATO documentation into a modern, machine-readable format
• Supporting a GRC SaaS implementation and should understand how to manage workspaces, program settings and KSI (Key Security Indicators) mapping
• Creating scripts and validators to automate evidence collection from our clients environment
• Validating boundary diagrams, data flows and network architecture against actual cloud configurations
• Developing and delivering training to staff on GRC processes, tools and implementation best practices

• SME level knowledge of Governance, Risk and Compliance frameworks
• FedRAMP Moderate and IL4 knowledge of NIST 800-53 controls as well as a strong understanding of Rev 5
• Experience working with GRC SaaS products. Paramify, RegScale or Vanta experience is a huge plus
• Experience working with Python or API based automation in order to write “Fetcher” and “Validator” scripts to automate evidence collection
• Ability to validate boundary diagrams, data flows, and network architecture against actual cloud configurations
• Demonstrated ability to develop and deliver training to staff on GRC processes, tools, and implementation best practices

Secret or higher clearance is highly preferred as a Tier 5 Public Trust may need to be obtained

excellent benefits and compensation packages