GRC Analyst - Public Sector

The role

This person will own the execution of governance, risk, and compliance operations for the public sector business. They will run FedRAMP/GovRAMP continuous monitoring, maintain compliance trackers, and coordinate with various technical and legal teams.

What you will do

• Coordinate and execute external 3PAO assessments and respond to auditor requests.
• Maintain FedRAMP and GovRAMP controls and documentation aligned with NIST SP 800-53 rev 5.
• Prepare certification and authorization packages and maintain the System Security Plan.
• Replace manual evidence collection with system-generated or API-driven evidence.
• Lead the FedRAMP continuous monitoring process including vulnerability management lifecycle.
• Coordinate access reviews, incident response exercises, and contingency plan testing.
• Design and implement FedRAMP training programs.
• Conduct internal reviews of logged events and control activities.
• Collaborate to design automation-first and AI-enabled workflows.
• Serve as a security subject matter expert for public sector sales activities and RFP responses.

Required qualifications

• 4+ years of hands-on cybersecurity, compliance, or identity-management experience.
• Demonstrated personal execution of FedRAMP, GovRAMP, or comparable continuous-monitoring work.
• Direct experience with FedRAMP, GovRAMP, and NIST frameworks (800-53, 800-63, 800-171).
• Proven ability to personally execute continuous monitoring, vulnerability remediation, and compliance reporting.
• Proven ability to design and improve repeatable compliance processes.
• Strong communication, organization, and collaboration skills.
• Strong written communication and ability to write persuasively for a customer audience.
• Ability to adapt to changing requirements.
• Demonstrated customer-facing experience.
• Must be a U.S. Person (U.S. Citizens or U.S. Permanent Residents) residing in the United States.
• Be able to obtain a U.S. OPM NACI clearance.

Nice to have

• Public sector experience
• Experience using AI tools (e.g., ChatGPT, Glean, Gemini) and machine-readable formats (e.g., OSCAL)
• Experience in regulated industries (e.g., financial services, healthcare)
• Knowledge of privacy and compliance frameworks such as GDPR, CCPA, and key NIST standards
• Professional certifications (CISSP, CISM, CISA, IAPP)
• Proven hands-on contribution to certification and compliance initiatives (FedRAMP, GovRAMP, NIST 800-63/171)
• Skilled in continuous monitoring, vulnerability management, policy updates, and audit coordination
• Track record of identifying and closing process gaps proactively

Before you apply

• Must be a U.S. Person (U.S. Citizens or U.S. Permanent Residents) residing in the United States
• Be able to obtain a U.S. OPM NACI clearance

About the company

Socure is building the identity trust infrastructure for the digital economy by verifying identities in real time and stopping fraud. The company works with businesses and governments to solve complex identity problems.