GRC Analyst - Associate

Job Description

Job Description

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance

SecurePro is seeking a motivated and detail-oriented Associate Governance, Risk, and Compliance (GRC) Analyst to
support a federal cybersecurity program in Washington, DC. The team provides cybersecurity governance, risk
management, and compliance support across a portfolio of approximately 32 FISMA Moderate information systems.

The Associate GRC Analyst will work under the guidance of experienced cybersecurity professionals, including Senior
and Lead Information System Security Officers (ISSOs), to support federal security compliance activities, risk tracking,
documentation management, continuous monitoring, and audit preparation.

This is a hands-on, on-site position designed for an early-career professional interested in developing a career in
cybersecurity governance, risk management, compliance, and federal information security.

The ideal candidate has strong organizational and analytical skills, attention to detail, a basic understanding of
cybersecurity concepts, and an interest in learning federal security frameworks and compliance processes.

Key Responsibilities
• Assist with day-to-day cybersecurity governance, risk management, and compliance activities supporting federal
information systems.
• Support Risk Management Framework (RMF) activities in accordance with NIST SP 800-37 and applicable federal
cybersecurity requirements.
• Collect, organize, and maintain cybersecurity documentation, assessment records, and compliance evidence.
• Assist with maintaining System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and
Milestones (POA&Ms), and other security documentation.
• Track security findings, remediation activities, action items, and compliance deadlines.
• Support the maintenance of cybersecurity records and authorization information in CSAM or other Governance,
Risk, and Compliance (GRC) platforms.

Preferred Qualifications
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Business, or
a related field.
SECUREPRO • CAREERS Page 3
SECUREPRO Associate GRC Analyst / Position Description
• Academic coursework, internships, or professional exposure to cybersecurity, IT auditing, risk management, or
regulatory compliance.
• Familiarity with NIST SP 800-53, NIST SP 800-37, FISMA, or the Risk Management Framework (RMF).
• Basic understanding of security assessments, compliance reviews, or authorization processes.
• Familiarity with System Security Plans (SSPs), POA&Ms, or security control documentation.
• Exposure to CSAM, ServiceNow, Splunk, or other cybersecurity and compliance management tools.
• Familiarity with vulnerability management tools such as Tenable Nessus, Qualys, or ACAS.

Flexible work from home options available.