Staff GRC Analyst

This is a Fully Remote Job About Our Client: The organization operates in the intelligent workflow automation industry, addressing challenges faced by IT and security teams in managing complex workflows across diverse technology environments. It provides a vendor-agnostic platform that integrates with any API-enabled service, enabling customers to accelerate their key objectives securely and efficiently. The platform emphasizes security and privacy by design and supports multi-cloud environments, serving a broad range of clients including major enterprises. About the Opportunity: The STAFF GRC ANALYST role serves as a critical link between technical engineering teams and external auditors, ensuring compliance with various security standards and regulations. The position involves validating technical configurations, assessing data flows, and helping to establish automated safeguards within a multi-cloud environment. This role impacts the organization by strengthening security governance and facilitating compliance with federal and industry requirements. Responsibilities: Collaborate with Engineering, Security, and Infrastructure teams to translate security frameworks into technical controls and standards across AWS and Azure. Assess technical implementations in areas such as infrastructure, networking, containers, databases, IAM, encryption, logging, and vulnerability management to ensure control alignment. Define and validate evidence requirements, identify gaps, and drive remediation efforts. Support FedRAMP authorization processes, continuous monitoring, POA&M management, vulnerability reporting, evidence packages, and change management. Assist in external audits and assessments, including 3PAO engagements and audit readiness. Monitor evolving federal security requirements and communicate updates to stakeholders. Identify and implement opportunities to scale compliance through automation and policy-as-code. Requirements: At least 12 years of experience in security compliance, technical GRC, cloud security, IT audit, or related governance roles. Practical experience translating compliance standards into technical controls and configuration benchmarks. Strong knowledge of cloud and SaaS security domains including IAM, encryption, logging, vulnerability management, and secure SDLC. Experience with FedRAMP authorization, continuous monitoring, POA&M management, and external assessments. Relevant certifications such as PMP, CISSP, CISM, CISA, or CCSP are advantageous. Pay Range and Compensation Package: Target annual compensation: $215,000 - 230,000 Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin. Note: TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.