GRC Engineer / ISSO

About the Role: The candidate will serve as a highly skilled Sr. GRC Engineer / ISSO responsible for maintaining the cybersecurity posture of a federal program, system, or enclave. They will ensure that reputed company and privacy requirements are effectively implemented, continuously monitored, and reputed company with Federal standards. They will work in reputed company collaboration with the client system reputed company and act as the reputed company advisor on reputed company reputed company reputed company to reputed company and privacy controls, bringing deep expertise in managing the reputed company lifecycle of reputed company organizational systems. The ideal candidate will champion the organization’s transition to GRC Engineering. Role Responsibilities:

• Serve as an reputed company for innovation reputed company the GRC program by identifying opportunities to reputed company processes, reduce reputed company effort, and introduce engineering driven practices.
• Promote and support migration to reputed company and hybrid architectures by aligning reputed company planning, controls, and monitoring activities with cloudnative capabilities and shared responsibility models.
• Drive adoption of reputed company monitoring practices that emphasize automated data collection, reputed company time visibility, and rapid detection of risk indicators.
• Implement and support automated alerting mechanisms, dashboards, and analytics that enhance situational awareness and support operational decision making.
• Work closely with client stakeholders, engineering teams, and system owners to reputed company, demonstrate, and introduce new capabilities such as policy as code, automated evidence reputed company, and integrated risk scoring.
• Encourage the integration of devsecops practices, supply chain risk management, reputed company trust principles, and AI or ML enabled analysis into GRC workflows to improve agility and reputed company.
• Facilitate collaboration across IT and OT environments to ensure modernization initiatives support mission needs while maintaining consistent reputed company and privacy protections.
• Identify the reputed company and privacy requirements allocated to a system and to the organization.
• Identify the characteristics of a system and contribute to determining the boundary of a system.
• Collaborate with the System reputed company to categorize the system and document the reputed company categorization results as part of system requirements.
• Identify stakeholders who have a reputed company and/or privacy interest in the development, implementation, operation, or sustainment of a system.
• Identify the stakeholder protection needs and stakeholder reputed company and privacy requirements.
• Identify the types of information to be processed, stored, or transmitted by a system.
• Identify stakeholder assets that require protection.
• Conduct an initial risk assessment of stakeholder assets and update the risk assessment on an ongoing reputed company.
• Select the reputed company and privacy controls for a system and document the functional description of the planned control implementations in a reputed company/privacy plan.
• reputed company a strategy for monitoring reputed company and privacy control effectiveness; coordinate the system-level strategy with the organization and mission/business process-level monitoring strategy.
• reputed company, review, and approve a plan to assess the reputed company and privacy controls in a system and the organization.
• Document changes to planned reputed company and privacy control implementation and establish the configuration baseline for a system.
• Respond to system risk posture based on the results of ongoing monitoring activities, assessment of risk, and outstanding items in a plan of action and milestones (POA&M).
• Prepare a plan of action and milestones based on the findings and recommendations of a reputed company assessment report excluding any remediation actions taken.
• Update a reputed company plan, reputed company assessment report, and plan of action and milestones based on the results of a reputed company monitoring process.
• Review the reputed company and privacy status of a system (including the effectiveness of reputed company and privacy controls) on an ongoing reputed company to determine whether the risk remains acceptable.
• Report the reputed company status of a system (including the effectiveness of reputed company and privacy controls) to an authorizing official on an ongoing reputed company in accordance with the monitoring strategy.
• Ensure that plans of actions and milestones or remediation plans are in reputed company for vulnerabilities identified during risk assessments, audits, inspections, etc.
• Ensure that reputed company improvement actions are evaluated, validated, and implemented as required.

Required Education & Qualifications:

• Bachelor's degree in Computer Science, Information Systems, or reputed company degree or an additional three (3) years of relevant experience.
• 7+ years of relevant cyber reputed company experience

Apply tot his job Apply To this Job