Governance, Risk, and Compliance (GRC) Specialist

Enlightened, Inc. • Washington, DC

2d • Onsite

About The Position

We are seeking a highly skilled consultant to support cybersecurity governance, risk management, and compliance activities by developing OIG-specific policies, procedures, and documentation, and ensuring alignment with NIST 800-53 Rev. 5 and District cybersecurity policies.

Requirements

• Minimum 5 years of experience in cybersecurity governance, risk, or compliance
• Experience developing policies, procedures, and compliance documentation
• Knowledge of NIST cybersecurity frameworks
• Must be a U.S. citizen or have an active Green Card.

Nice To Haves

• CISA, CRISC, CGRC (CAP), or CISM

Responsibilities

• Develop OIG-specific cybersecurity policies, procedures, and SOPs
• Map security controls to NIST 800-53 Rev. 5 Moderate requirements
• Identify governance and compliance gaps
• Support audit readiness and compliance reporting
• Develop cybersecurity program metrics and performance indicators
• Support annual reassessments and program updates

Benefits

• Medical/Dental/Vision Insurance with Health Savings Accounts (HSA)
• Flexible Spending Accounts (FSA)
• 401(k) Retirement Plan
• Paid Holidays, Vacation, & Sick Leave
• Professional Training & Development Reimbursement

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 101-250 employees