Cybersecurity GRC Analyst
Core
Cyber Governance and Compliance Specialist supporting a federal agency's multi-year cybersecurity program by assessing risk posture, authorizing systems, and managing compliance.
Role type
Senior IC GRC Analyst (Assessment and Authorization)
Builds
Risk assessments, authorization packages, and compliance dashboards for federal information systems
Domain
US Federal Government / Cybersecurity Governance
Required skills
Assessment and Authorization (RMF), NIST SP 800-37/800-53A, Risk trade-off analysis, POA&M review, Security control assessment, FISMA reporting, Cyber risk register management, Supply Chain Risk Management (SCRM), Third-Party Risk Management (TPRM), Power BI (via careerplan.io/jobs/48-005-1D-27A-cybersecurity-grc-analyst)
Preferred skills
Federal contracting experience, Integrated Risk Management (IRM), JCAM platform, Automation/AI tooling, CGRC/CISA/CRISC/CISM/CISSP certifications
Technologies
NIST SP 800-37, NIST SP 800-53A, Power BI, JCAM
Responsibilities
Perform risk trade-off analyses and develop mitigation strategies; Review POA&Ms and track remediation; Execute Security Control Assessments per NIST standards; Prepare briefings for authorization decisions; Support SCRM and TPRM programs; Maintain Cyber Risk Register and track regulations; Develop cybersecurity dashboards on Power BI; Apply automation/AI for compliance tracking.
Seniority
Senior, hands-on IC