Cloud Security GRC Consultant
Core
Apply federal security frameworks (NIST RMF, FedRAMP) to Google Cloud environments, bridging engineering and security to achieve Authorization to Operate (ATO) and integrate compliance into system design.
Role type
Senior IC Cloud Security GRC Consultant
Builds
Federal cloud security authorizations and compliance artifacts for government clients
Domain
US Federal Government / Cloud Security
Required skills
Google Cloud services, NIST RMF, FedRAMP, eGRC tools (eMASS, XACTA), security control assessments, POA&M development, cloud architecture partnership, continuous monitoring, vulnerability management
Preferred skills
Agile methodology, Google Cloud Security Command Center, Assured Workloads, compliance automation (OSCAL, Python, Terraform), US Public Sector customer experience, DoD/DISA policies
Technologies
Google Cloud Platform, Terraform, Python, OSCAL, eMASS, XACTA, Security Command Center
Responsibilities
Conduct technical security control assessments against GCP components; partner with cloud architects to integrate compliance into design; develop authorization artifacts and POA&M entries; support reviews with Authorizing Officials and 3PAOs; implement security best practices using GCP native tools; contribute to federal cloud security policy consulting
Seniority
Mid-level, hands-on IC
