GRC Engineer, NIST

🕒 August 19

🇺🇸 United States – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

🚔 Compliance

🚫👨‍🎓 No degree required

👻 Ghost score 48%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Workstreet

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2023

🔒 Cybersecurity

📋 Compliance

🤝 B2B

Cybersecurity • Compliance • B2B

Workstreet is a managed security and compliance services provider that helps businesses automate and modernize their security programs. With expertise in compliance frameworks including SOC 2, ISO 27001, HIPAA, and GDPR, Workstreet supports companies in achieving their security and compliance outcomes efficiently. Their services include acting as a virtual Chief Information Security Officer (vCISO), full-scale penetration testing, and vendor risk management, aiming to streamline security processes while allowing businesses to focus on growth.

📋 Description

• Analyze and apply NIST SP 800-53 security and privacy controls and control baselines • Create, update, and maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and supporting A&A artifacts • Perform technical gap analyses and readiness reviews for federal agency ATO or FedRAMP authorization validation • Assist with continuous monitoring cycles by tracking monthly vulnerability logs, POA&M updates, and structural change requests • Guide clients through the Assessment and Authorization process and coordinate logistics with 3PAOs and independent assessors • Partner with internal and client technical teams to remediate control deficiencies across Low, Moderate, and High baselines • Document technical security boundaries, interconnectivity agreements, and shared responsibility profiles across cloud environments • Track evolving NIST SP 800-53 revisions, FedRAMP requirements, and federal policy updates • Partner directly with organizations pursuing federal authorizations and assist with 3PAO assessment preparation • Manage multiple compliance projects concurrently under senior guidance

🎯 Requirements

• 2+ years of direct experience executing GRC deliverables across NIST SP 800-53, FedRAMP, or NIST Risk Management Framework (RMF) lifecycles • Hands-on experience creating, evaluating, and maintaining System Security Plans (SSPs), POA&Ms, and technical security narratives • Ability to manage multiple federal compliance project tasks simultaneously • Familiarity with cloud service providers and secure configurations in AWS GovCloud or Azure Government • Strong written and verbal English communication skills • Recognized professional designation such as CGRC, CAP, CISSP, or CompTIA Security+ is helpful • Practical history supporting live agency Authority to Operate (ATO) certifications or working alongside 3PAO assessment teams is helpful • Familiarity with automated or manual FedRAMP Continuous Monitoring (ConMon) workflows is helpful • Exposure to CMMC 2.0 or NIST SP 800-171 baselines is helpful • Reliable, high-speed internet connection and professional home office environment • Commitment to working 8:00 AM–5:00 PM US Eastern Time • Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities • Must participate in live video interviews with camera on and verify identity during recruitment and onboarding • Employment contingent upon successful identity verification and background screening, where permitted by law • Must be authorized to work in the U.S. without visa sponsorship now or in the future

🏖️ Benefits

• Clear path with mentorship and training opportunities • Reimbursement for the successful completion of approved training and certification courses relevant to your current role • Competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities • Significant room for career advancement • Flexibility to work from anywhere while collaborating with a global team