Governance, Risk & Compliance Engineer

DPP•Tempe, AZ

1d•Remote

About The Position

DPP is seeking a Governance, Risk & Compliance Engineer for an opportunity with our client in the cybersecurity industry. This is an excellent opportunity for an early-career cybersecurity professional who has direct government compliance experience and wants to grow within a GRC-focused engineering environment. The ideal candidate will have hands-on experience supporting government Authorization to Operate (ATO) processes and be comfortable leveraging modern AI tools to improve security, compliance, documentation, and risk-management workflows.

Requirements

1–3 years of professional experience in Governance, Risk & Compliance, cybersecurity, information assurance, or a related field.
Direct hands-on experience performing or supporting government ATOs — candidates should have completed or substantially participated in at least one or two government ATO processes.
Understanding of cybersecurity governance, risk management, security controls, and compliance processes.
Experience creating or maintaining security and compliance documentation.
Strong analytical, organizational, and written communication skills.
Ability to work independently in a remote environment.
Experience using AI tools to support cybersecurity, compliance, documentation, research, or workflow automation.

Nice To Haves

Experience with NIST Risk Management Framework (RMF) and related NIST publications.
Familiarity with government security frameworks and authorization processes.
Experience with POA&Ms, SSPs, security control assessments, and continuous monitoring.
Cybersecurity or GRC-related certifications such as Security+, CySA+, CAP, CISM, or CISSP.
Experience working with GRC platforms or security compliance management tools.
Familiarity with AI-assisted cybersecurity and compliance workflows.

Responsibilities

Support governance, risk, and compliance activities across information systems and security programs.
Perform and support Authorization to Operate (ATO) activities within government environments.
Develop, maintain, and manage security documentation, including System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), risk assessments, and related compliance artifacts.
Assist with security control implementation, assessment, validation, and continuous monitoring.
Coordinate with cybersecurity, engineering, IT, and program teams to address security and compliance requirements.
Identify, document, and track security risks and remediation activities.
Support audits, assessments, and government compliance reviews.
Use AI tools and automation technologies to improve GRC processes, documentation, analysis, and workflow efficiency.
Translate technical security requirements into actionable compliance and risk-management activities.
Stay current with applicable cybersecurity frameworks, government security requirements, and evolving compliance practices.