Senior GRC Engineer – GOV, FedRAMP 20x

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Workstreet

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2023

🔒 Cybersecurity

📋 Compliance

🤝 B2B

Cybersecurity • Compliance • B2B

Workstreet is a managed security and compliance services provider that helps businesses automate and modernize their security programs. With expertise in compliance frameworks including SOC 2, ISO 27001, HIPAA, and GDPR, Workstreet supports companies in achieving their security and compliance outcomes efficiently. Their services include acting as a virtual Chief Information Security Officer (vCISO), full-scale penetration testing, and vendor risk management, aiming to streamline security processes while allowing businesses to focus on growth.

📋 Description

• Lead federal certification advisory engagements for FedRAMP 20x, Assessment & Authorization, and federal compliance lifecycles • Serve as an executive-level trusted advisor and translate complex federal requirements into business language • Direct, mentor, coach, and manage compliance professionals while enforcing quality and delivery accountability • Author and maintain Security Decision Records, Security Configuration Guides, and OSCAL/JSON/YAML compliance artifacts • Connect CSPM and GRC platforms into agency pipelines under the FedRAMP Collaborative Continuous Monitoring model • Conduct federal gap assessments, readiness reviews, and control mapping across FedRAMP 20x Class A, B, and C requirements • Orchestrate 3PAO assessments, C3PAO audits, and independent assessor evaluations • Monitor CR26, Significant Change Notifications, and the Rev5-to-20x transition timeline • Assume active portfolio ownership within the first 15 days • Represent clients on executive calls and maintain client engagement, satisfaction, and account retention

🎯 Requirements

• 5+ years of direct experience implementing federal compliance, NIST SP 800-53, FedRAMP, or Risk Management Framework standards • 3+ years of experience leading multi-project client engagements, building executive trust, and managing account retention • Deep familiarity with FedRAMP 20x Program Certifications and Rev5 Agency Certifications • Hands-on experience with AWS, Azure, and GCP, specifically AWS GovCloud or Azure Government regions • Working ability with Python, OPA/Rego, infrastructure as code, and policy-as-code tooling • Practical experience working with or for a 3PAO, participating on security assessment teams, or conducting formal evidence adjudication • Active certification such as CISSP, CISM, CGRC, or Certified Authorization Professional • Active cloud certification such as AWS Solutions Architect Associate, Azure Security Engineer, or GCP Associate Cloud Engineer • Documented experience managing FedRAMP certification activities and real-time Collaborative Continuous Monitoring workflows • Practical experience authoring or validating machine-readable SSPs, POA&Ms, or KSI evidence using OSCAL, JSON, or YAML schemas • Excellent written and verbal English communication skills • Reliable high-speed internet connection and professional home office environment • Availability for a standard schedule of 8:00 AM–5:00 PM US Eastern Time, with occasional schedule flexibility • Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities • Must participate in live video interviews with camera on and verify identity during recruitment and onboarding • Employment contingent on identity verification and background screening where permitted by law • Must be authorized to work in the U.S. without current or future visa sponsorship

🏖️ Benefits

• Career development with mentorship and training opportunities • Reimbursement for approved role-related training and certification courses • Competitive base salary • Regular performance reviews linked to merit-based appraisals • Bonus opportunities • Career advancement opportunities • Remote-first work flexibility • Flexible working hours to accommodate business priorities and global collaboration