LogoFresh Jobs Ahead
Workstreet
Workstreet
11 – 50 Zaposleni
B2BKibernetska varnostSkladnost
Workstreet je podjetje za storitve kibernetske varnosti in skladnosti, ki podjetjem pomaga vzpostaviti, upravljati in izboljšati njihove varnostne programe. Njegovo delo zajema pripravljenost na SOC 2, ISO 27001, HIPAA in GDPR ter storitve virtualnega CISO, penetracijsko testiranje in upravljanje tveganj dobaviteljev. Workstreet s povezovanjem strateškega svetovanja in praktične varnostne podpore organizacijam B2B pomaga izpolnjevati zahteve glede skladnosti ter krepiti varnostne operacije med rastjo.
LinkedIn
Delovna mesta v podjetju

GRC Engineer, FedRAMP 20x

Automate FedRAMP 20x evidence collection and compliance workflows for federal organizations and defense contractors. Help teams prepare for authorization and maintain continuous monitoring.

USZdružene države AmerikeNa daljavoPolni delovni časJuniorSrednja ravenDiploma ni potrebnaZahtevani Jezik: angleščinaSkladnost
AWSAzureGoogle Cloud PlatformOblakPythonTerraform

Opis

  • Validate FedRAMP 20x controls against CR26 and 46 KSIs across 10 families.
  • Create and maintain machine-readable Security Decision Records, Security Configuration Guides, and OSCAL, JSON, and YAML documentation that follows RFC-0024 and OMB M-24-15.
  • Build and maintain automated evidence pipelines for ongoing KSI validation.
  • Review technical readiness, assess gaps, and map controls to FedRAMP 20x Class A, B, and C baselines.
  • Connect CSPM and GRC tools to agency pipelines to support Collaborative Continuous Monitoring.
  • Coordinate evidence submissions and logistics for 3PAO audits and independent assessments with senior guidance.
  • Work with internal and client technical teams to address security gaps across multi-cloud environments.
  • Track CR26 updates, Significant Change Notifications, and the transition schedule from Rev5 to 20x.
  • Work directly with client engineering and compliance leads.
  • Handle several compliance tasks at once with senior guidance during U.S. Eastern Time business hours.

Zahteve

  • At least two years of direct technical experience delivering GRC work involving NIST SP 800-53, FedRAMP, or federal authorization lifecycles.
  • Basic knowledge of FedRAMP 20x Class A, B, and C program certifications, CR26 rules, and KSI-based validation.
  • Practical experience creating or using technical compliance artifacts with OSCAL, JSON, or YAML schemas.
  • Practical exposure to AWS, Azure, GCP, AWS GovCloud, or Azure Government.
  • Working knowledge of Python, Rego/OPA, Terraform, or other scripting or policy-as-code tools.
  • Ability to coordinate several federal compliance tasks at the same time.
  • Strong written and spoken English communication skills.
  • A recognized security certification, such as CompTIA Security+, CGRC, CAP, or Associate of CISSP.
  • A technical cloud certification, such as AWS Solutions Architect Associate, Azure Security Engineer Associate, or GCP Associate Cloud Engineer.
  • Experience taking part in 3PAO audits or supporting active agency ATO evaluations.
  • Experience supporting FedRAMP ConMon or Collaborative Continuous Monitoring (CCM) workflows.
  • Familiarity with CMMC 2.0 or NIST SP 800-171 requirements.
  • Reliable, high-speed internet and a professional home office.
  • Availability from 8:00 a.m. to 5:00 p.m. U.S. Eastern Time, with occasional flexibility.
  • Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities.
  • Must be authorized to work in the U.S. now and in the future without visa sponsorship.
  • Must complete live video interviews with the camera on and verify identity during recruitment and onboarding.
  • Employment is contingent on identity verification and background screening where permitted by law.

Ugodnosti

  • Career development through mentorship and training opportunities.
  • Reimbursement for approved training and certification courses relevant to the role.
  • Competitive base salary, regular performance reviews tied to merit-based assessments, and bonus opportunities.
  • Strong opportunities for career progression.
  • Remote-first work flexibility.
  • Ability to work from anywhere while collaborating with a global team.

Sorodna delovna mesta