Senior GRC Analyst Job at GTN Technical Staffing, Houston, TX

MzZTdFppMm9sbjVWMzhLVkVSWE80c1pD
  • GTN Technical Staffing
  • Houston, TX

Job Description

Job Title: Senior GRC Analyst

Role Summary
We are seeking a Senior GRC Analyst with deep, hands-on expertise in DoD and federal compliance programs, particularly CMMC 2.0 Level 2 and FISMA, in environments handling Controlled Unclassified Information (CUI). This role focuses on implementing, validating, and sustaining NIST SP 800-171 and NIST SP 800-53 controls; maintaining audit and authorization readiness; and collaborating cross-functionally with Engineering, DevOps, Cloud, and Security teams to ensure controls are effectively implemented, evidenced, and continuously monitored. Key Responsibilities

  • CMMC & DoD Compliance
    Drive CMMC 2.0 Level 2 implementation and readiness for CUI-processing systems.
    Implement, validate, track, and remediate NIST SP 800-171 controls, including evidence gathering and POA&M management.
    Prepare for DoD assessments and third-party audits by ensuring full control implementation and traceability.
  • FISMA & Federal Security Requirements
    Execute FISMA-aligned activities using NIST SP 800-53 (Moderate baseline).
    Support federal authorization efforts, including System Security Plan (SSP) updates, control narratives, evidence validation, and continuous monitoring (ConMon).
    Address audit findings and remediate gaps in collaboration with internal stakeholders.
  • Technical Control Validation
    Partner with Engineering, CloudOps, and Security teams to validate technical controls in AWS-regulated environments, covering:
    • Identity and Access Management (IAM)
    • Logging, monitoring, and auditability
    • Encryption (at rest and in transit)
    • Vulnerability and configuration management
    • Incident response and contingency planning
      Review technical artifacts (e.g., architecture diagrams, configurations, logs) to confirm audit-ready evidence.
  • Risk & Supply Chain Security
    Perform security and risk assessments for systems, services, and changes involving CUI.
    Conduct third-party/supply chain risk evaluations per DoD and federal standards.
    Maintain risk registers, track findings, and manage remediation via POA&Ms.

Required Qualifications
Core Experience

  • 6+ years in GRC, cybersecurity compliance, or federal security programs.
  • Direct, hands-on experience with CMMC 2.0 Level 2 and/or DoD environments managing CUI.
  • Proven collaboration with engineering/DevOps teams on control implementation (beyond advisory roles).

Technical & Framework Expertise

  • Strong proficiency in:
    • NIST SP 800-171 (protecting CUI)
    • NIST SP 800-53 (FISMA Moderate baseline)
    • FISMA requirements
    • CMMC 2.0 framework
  • Demonstrated ability to validate technical security controls in AWS cloud environments.

Documentation & Communication Skills

  • Expertise in producing audit-ready documentation, evidence packages, control narratives, and reports tailored to regulated/government audiences.
  • Excellent written and verbal communication for cross-functional and executive/government interactions.

Preferred Qualifications

  • Prior involvement in CMMC assessments or readiness programs.
  • Experience supporting federal Authority to Operate (ATO) or authorization processes.
  • Familiarity with CI/CD pipelines and cloud-native architectures.
  • Background in defense, government contracting, or highly regulated federal environments.
  • Relevant certifications (preferred):
    • CMMC Registered Practitioner (RP)
    • CISSP, CISM, or CISA
    • Cloud security certifications (e.g., AWS Security Specialty)

Job Tags

Similar Jobs

Inside Higher Ed

Medical Illustrator Job at Inside Higher Ed

 ...Posting Number S14958P Working Title Medical Illustrator Department VetMed-Educational Rsrcs Ctr About The University Of Georgia Chartered by the state of Georgia in 1785, the University of Georgia is the birthplace of public higher education in America... 

CornerStone Staffing

Hearing Aid Repair Technician Job at CornerStone Staffing

 ...Hearing Aid Repair Technician Location : Fort Worth, TX 76155 | Onsite Compensation & Schedule $18.00 per hour MondayFriday, 8:00 AM4:30 PM W2 employment Start date: ASAP Role Impact The Rapid Repair Associate ensures hearing instruments are... 

SGS Express

Semi Truck Owner Operator - Sleeper Job at SGS Express

 ...Owner Operators: 90% PAY - 2,800+ Miles Weekly - Perfect Safety Carrier Are you tired of recruiter lies and changing companies every few months? SGS Express Inc. offers a long-term partnership for professional owners. We have zero failed inspections and a perfect... 

Qualis1 Inc

React JS Developer - Plano TX - onsite Job at Qualis1 Inc

 ...Senior React JS Developer - Plano TX - Day-01. Job title: Senior React JS Developer Work Location with Zip code: 6565 Headquarters Drive Plano TX TX US 75024-5965 ---Day 1 onsite Duration of the project: 6 months Minimum years of experience required:... 

Confidential

Welder Job at Confidential

 ...Job Title: Welder Job Description The welder will utilize TIG and stick welding techniques for pipe fabrication, specifically for process...  ...match is provided. While per diem is not offered, employees who travel over 60 miles are reimbursed for travel expenses and provided...