eGRC Data Specialist

Role Description

We are seeking an eGRC Data Specialist to support the implementation of a new enterprise Governance, Risk and Compliance (eGRC) platform by leading data discovery, migration and transformation activities. This role is responsible for analyzing, mapping and migrating cybersecurity and Risk Management Framework (RMF) data from legacy systems into Open Security Controls Assessment Language (OSCAL)-compliant formats while supporting reporting, dashboard development and workflow modernization. The eGRC Data Specialist position partners with internal stakeholders and Professional Services resources to ensure accurate, efficient and high-quality data migration throughout the implementation lifecycle. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What you’ll be doing:

• Perform data discovery activities functions.
• Coordinate and collaborate with Professional Services resources to execute data migration activities.
• Analyze data exports.
• Develop automated scripts to support data parsing and extraction.
• Draft assessments and reports related to data migration activities.
• Identify and categorize RMF artifacts for migration or archival.
• Discover System Security Plans (SSPs), control artifacts, assessment trackers and other RMF artifacts stored in Microsoft Excel and Microsoft Word for migration.
• Transform legacy data and schemas into OSCAL-compliant formats.
• Leverage artificial intelligence (AI) tools to support data migration activities.
• Review Microsoft SharePoint repositories to identify artifacts for migration.
• Capture legacy system workflows, dashboards and reports for migration.
• Reproduce and enhance workflows, dashboards and reports within the new eGRC platform.
• Develop custom dashboards, reports and content.
• Work with stakeholders to generate and present key metrics.
• Contribute to the development of System Development Lifecycle (SDLC) artifacts.
• Advise on data-related topics and support data-related inquiries.

Qualifications

• Bachelor's degree in Information Management, Cybersecurity, Data or a related field.
• 3+ years of professional experience working with cybersecurity and information technology (IT) data.
• Strong understanding of and experience with RMF.
• Strong understanding of cybersecurity best practices.
• Experience performing security engineering functions.
• Experience developing and modifying scripts.
• Experience mapping inheritance and Common Control Catalogs.
• Experience developing or tuning risk scoring.
• Experience mapping data schemas.
• Experience working with OSCAL.
• Experience working on Federal systems.
• Experience working in Amazon Web Services (AWS) GovCloud.
• Experience working with SDLC.
• Experience working in an Agile environment.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.

Requirements

• Applicants must currently be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.

Beneficial to have:

• Top Secret/Q clearance.
• Industry recognized certifications.

Benefits

• 144 hours of PTO.
• 11 holidays.
• 85% of insurance premium covered.
• 401k.
• Continued education, certifications maintenance and reimbursement.
• And more.

Where it’s done:

Remote (Herndon, VA).