Mid GRC Compliance Officer

Overview

Jobs via Dice presents an opportunity for a Mid GRC Compliance Officer. This role supports compliance with NIST 800-53 Risk Management Framework (RMF) requirements and ensures continuous security control compliance.

Scope & Responsibilities

• Manage communication with stakeholders including IT managers and auditors
• Track and report on security KPIs and IT metrics
• Establish, gather, analyze, and report security metrics
• Maintain active system Authority To Operate (ATO) and system security documentation

Required Skills

• 5+ years with NIST Information Assurance Control Assessment
• 5+ years with NIST RMF and vulnerability compliance reporting
• 5+ years maintaining System Plan of Action and Milestones (POA&M)
• 3+ years with GRC Applications (e.g. Xacta, Archer, CSAM or eMASS)
• Certification such as CISSP, CISM, or CAP

Preferred Skills

• 3+ years with Tenable, TrendMicro, or QRadar tools
• Exposure to System Development Lifecycle, Azure, or AWS
• Experience in project planning
• Public Trust Clearance (sponsorship available)

Tasks

• Expertly manage NIST RMF process and security controls
• Develop and publish system security artifacts
• Monitor daily scrum meetings and provide updates to leadership
• Translate security needs into technical solutions

Key skills/competency

NIST, RMF, Compliance, GRC, Security, KPIs, POA&M, ATO, Certification, Auditing