Junior Cybersecurity GRC Analyst

🔥 20 hours ago

🏛️ District of Columbia, Washington – Remote

🏛️ District of Columbia – Remote ☕ Washington – Remote

⏰ Full Time

🟢 Junior

🎲 Risk

👻 Ghost score 14%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Dragonfli Group

WebsiteLinkedInAll Job Openings

11 - 50 employees

🔒 Cybersecurity

💼 Consulting

Cybersecurity • Consulting

Dragonfli Group is a Washington, DC based LLC specializing in management and technology consulting. The company transforms its clients’ businesses by leveraging high impact strategic planning and technology solutions coupled with expertise in infrastructure, corporate strategy, and operations. Dragonfli Group’s passionate and experienced consultants take a collaborative approach to provide strategic planning and information security solutions to organizations looking to increase profitability, streamline operations, manage risk, meet regulatory demands, and build market share.

📋 Description

• Support and contribute to the execution of the Risk Management Framework to authorize IT systems • Provide information on whether information systems are operating at an acceptable level of risk to the organization • Support information system authorization decisions by performing risk trade-off analyses • Contribute to the development of risk mitigation strategies and solutions • Support technical analysis across categorization, security control selection, implementation, and comprehensive assessments of risk posture • Support security control assessment activities in accordance with NIST SP 800-37 and NIST SP 800-53A • Support presentations and sometimes present to clients and other decision makers across technical and non-technical audiences • Advise clients on technical designs, implementations, and solutions that protect against cybersecurity attacks • Support POA&M tracking, cyber risk register upkeep, and tracking of cybersecurity regulations, guidance, and data calls • Support cybersecurity dashboard development and automation of routine risk reporting and compliance tracking

🎯 Requirements

• Bachelor's degree in cybersecurity, information technology, or a related field • Exposure to Assessment and Authorization (RMF) work, including testing or assessing cybersecurity solutions, through coursework, internship, or professional experience • Working understanding of the Risk Management Framework and the federal authorization process • Strong written and verbal communication skills, including comfort supporting or delivering presentations • Ability to work independently and as a member of a team • U.S. Citizenship or Permanent Residency, with all work performed within the continental U.S. • Ability to pass a federal agency suitability or background investigation • Preferred: Internship, co-op, or 1 to 2 years of professional experience in a GRC, audit, or compliance role • Preferred: Familiarity with NIST SP 800-53 control families and evidence expectations • Preferred: Exposure to a GRC platform such as Xacta, eMASS, CSAM, Archer, or ServiceNow IRM • Preferred: Exposure to FISMA reporting, SCRM, or TPRM concepts • Preferred: Interest in or exposure to automation and AI-assisted compliance tooling • Preferred: Security+ or CGRC (formerly CAP) certification, or active pursuit of one • Risk Management Framework fundamentals under NIST SP 800-37 • Security control familiarity under NIST SP 800-53 and assessment basics under 800-53A • Risk trade-off analysis and mitigation strategy support • POA&M tracking and evidence collection • Security documentation and authorization artifact support • Cyber risk register and regulatory tracking support • Dashboard, reporting, and spreadsheet analysis skills • Exposure to automation and AI-assisted compliance tooling • Clear written and verbal communication with both technical and non-technical audiences • Ability to work independently and as a contributing member of a distributed team • Comfort operating in a fully remote setting with a camera-on meeting culture • Sound judgment about when to decide and when to escalate • Collaborative posture with system owners, business owners, developers, and assessors • Attention to documentation quality and follow-through on commitments

🏖️ Benefits

• Medical: Multiple POS health plan options including an HSA-compatible plan • Dental: PPO coverage for preventive, basic, and major services • Vision: Annual exam, frames, lenses, and contact lens allowance • 401(k): Employer match up to 5% of eligible compensation • Long-Term Disability: 100% employer-paid coverage at 50% of pre-disability earnings • Life Insurance & AD&D: 100% employer-paid coverage valued at $10,000 each • PTO: 15–25 days annually based on tenure • Paid Federal Holidays: All 11 federal holidays observed