Governance, Risk, and Compliance Engineer
Core
Architect and lead enterprise GRC integration and compliance automation initiatives for federal and commercial clients, designing scalable platform architectures and automated security control evidence ingestion processes.
Role type
Senior GRC Engineer (Cybersecurity Consulting)
Builds
Enterprise GRC platforms, automated compliance reporting, and real-time risk aggregation systems
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC), Federal/Commercial Consulting
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
GRC platform architecture, automated control evidence ingestion, enterprise data integration, regulatory framework mapping (NIST, FISMA, ISO), technical leadership, solution design
Preferred skills
Cloud security integration, DevSecOps workflows, SIEM integration, client engagement, team mentorship
Technologies
ServiceNow, Qmulos, Archer, NIST SP 800-53, NIST SP 800-37, FISMA, ISO 27001
Responsibilities
Architect enterprise GRC modernization programs, design scalable GRC platform architectures, define automated control evidence ingestion pipelines, establish enterprise data integration standards, translate regulatory requirements into technical designs, oversee security control mapping, provide technical direction for risk aggregation, implement QA processes for GRC initiatives, review architectural designs, collaborate with cybersecurity and audit stakeholders, mentor engineering teams, support business development activities
Seniority
Senior, hands-on IC with strategic leadership
