Governance, Risk & Compliance (GRC) Analyst

SkyePoint Decisions•Bethesda, MD

18h•$110,000 - $130,000•Remote

About The Position

SkyePoint Decisions is seeking a Governance, Risk & Compliance (GRC) Analyst to support a cybersecurity program and compliance initiatives by managing governance processes, risk management activities, policy compliance efforts, and audit readiness programs. The GRC Analyst serves as a key contributor to ensuring information systems and cybersecurity operations comply with Federal regulations, NIST standards and HHS policies. The position supports an integrated cybersecurity risk and compliance program by linking risks, POA&Ms, vulnerabilities, audit findings, incidents, corrective actions, and governance reporting to support executive decision-making and authorization activities. Collaborates with cybersecurity teams, system owners, ISSOs, auditors, and leadership to identify risks, monitor compliance, maintain governance documentation, and support continuous improvement of the organization's cybersecurity posture. This position is fully remote.

Requirements

Bachelor's degree in Cybersecurity, Information Systems, Information Assurance, Business Administration, or a related field.
Minimum 5 years of experience in cybersecurity governance, risk management, compliance, audit support, or information assurance.
Experience supporting Federal cybersecurity programs.
Knowledge of: NIST Cybersecurity Framework (CSF), NIST Risk Management Framework (RMF), NIST SP 800-53 Rev. 5, FISMA, Federal cybersecurity compliance requirements
Experience conducting compliance reviews, risk assessments, or audit preparation activities.
Strong analytical, organizational, and written communication skills.
U.S. Citizenship required.
Ability to obtain and maintain a Public Trust.

Nice To Haves

One or more of the following certifications: CGRC (formerly CAP), CRISC, CISA, CISSP, CISM, Security+, Certified in Governance, Risk and Compliance (GRC)
Experience supporting NIH, HHS, or other Federal civilian agencies.
Experience with governance and compliance platforms such as: ServiceNow GRC, Archer, eMASS, Xacta
Experience supporting FISMA audits and OIG assessments.
Knowledge of Zero Trust Architecture and Federal cybersecurity modernization initiatives.
Experience developing executive-level cybersecurity reporting and dashboards.
Familiarity with privacy compliance requirements, including PTAs and PIAs.

Responsibilities

Support governance and compliance activities within GRC platforms.
Maintain compliance records, risks, findings, and corrective action tracking.
Ensure data accuracy and completeness within governance systems.
Assist users with governance workflows and compliance processes.
Generate reports and metrics from GRC tools and repositories.
Support development, maintenance, and implementation of cybersecurity policies, procedures, standards, and guidelines.
Assist in mapping organizational controls to Federal cybersecurity requirements and frameworks.
Maintain governance documentation and standards repositories.
Ensure policies and procedures remain aligned with Federal requirements.
Support policy reviews, updates, and compliance assessments.
Maintain and update cybersecurity risk registers.
Perform risk identification, analysis, and tracking activities.
Support risk assessments and risk mitigation planning.
Monitor remediation activities for identified risks and control deficiencies.
Develop and maintain cybersecurity compliance metrics and reporting.
Support creation of executive dashboards and compliance scorecards.
Analyze program performance indicators and identify trends.

Benefits

Certification incentive program
PTO
Floating federal holiday options
Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs]
Flex Spending Accounts [FSAs]
Full Dental Plans
Vision
ST/LT Disability
Life Insurance
401k matched