eGRC Data Specialist

ShorePoint•Herndon, VA

4d•Remote

About The Position

ShorePoint is seeking an eGRC Data Specialist to support the implementation of a new enterprise Governance, Risk and Compliance (eGRC) platform. This role will lead data discovery, migration, and transformation activities, analyzing, mapping, and migrating cybersecurity and Risk Management Framework (RMF) data from legacy systems into Open Security Controls Assessment Language (OSCAL)-compliant formats. The position will also support reporting, dashboard development, and workflow modernization, partnering with internal stakeholders and Professional Services resources to ensure accurate and efficient data migration throughout the implementation lifecycle. This is an opportunity to shape the growth and culture of a fast-growing cybersecurity company.

Requirements

Data migration and data modeling principles.
Cybersecurity and RMF concepts and best practices.
Legacy-to-target data transformation and schema mapping.
OSCAL and cybersecurity data management concepts.
Dashboard, workflow and reporting development.
SDLC processes and Agile methodologies.
Bachelor's degree in Information Management, Cybersecurity, Data or a related field.
3+ years of professional experience working with cybersecurity and information technology (IT) data.
Strong understanding of and experience with RMF.
Strong understanding of cybersecurity best practices.
Experience performing security engineering functions.
Experience developing and modifying scripts.
Experience mapping inheritance and Common Control Catalogs.
Experience developing or tuning risk scoring.
Experience mapping data schemas.
Experience working with OSCAL.
Experience working on Federal systems.
Experience working in Amazon Web Services (AWS) GovCloud.
Experience working with SDLC.
Experience working in an Agile environment.
Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
Must currently be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.

Nice To Haves

Top Secret/Q clearance.
Industry recognized certifications.

Responsibilities

Perform data discovery activities functions.
Coordinate and collaborate with Professional Services resources to execute data migration activities.
Analyze data exports.
Develop automated scripts to support data parsing and extraction.
Draft assessments and reports related to data migration activities.
Identify and categorize RMF artifacts for migration or archival.
Discover System Security Plans (SSPs), control artifacts, assessment trackers and other RMF artifacts stored in Microsoft Excel and Microsoft Word for migration.
Transform legacy data and schemas into OSCAL-compliant formats.
Leverage artificial intelligence (AI) tools to support data migration activities.
Review Microsoft SharePoint repositories to identify artifacts for migration.
Capture legacy system workflows, dashboards and reports for migration.
Reproduce and enhance workflows, dashboards and reports within the new eGRC platform.
Develop custom dashboards, reports and content.
Work with stakeholders to generate and present key metrics.
Contribute to the development of System Development Lifecycle (SDLC) artifacts.
Advise on data-related topics and support data-related inquiries.