Socure
GRC Analyst - Public Sector
$120K–$145K
Hub - Washington DC · Hybrid · Full-time · Posted Sep 11, 2026
- Experience
- 4+ years; public sector experience is a plus but not required.
- Visa sponsorship
- Must be a U.S. Person (U.S. Citizen or U.S. Permanent Resident) residing in the United States and able to obtain a U.S. OPM NACI clearance.
About the job
Runs Socure’s public-sector governance, risk, and compliance operations, including continuous monitoring, audit readiness, vulnerability remediation, and customer-facing compliance support.
What you'll do
- Coordinate FedRAMP/GovRAMP assessments, control documentation, evidence collection, and authorization packages.
- Manage continuous monitoring, vulnerability remediation, access reviews, and audit-readiness reporting with cross-functional teams.
- Develop customer-facing compliance and RFP content and improve compliance workflows through automation, AI, and machine-readable formats.
What they ask for
- 4+ years of hands-on cybersecurity, compliance, or identity-management experience, including personal execution of FedRAMP, GovRAMP, or comparable continuous-monitoring work.
- Direct experience with FedRAMP, GovRAMP, and NIST frameworks (800-53, 800-63, 800-171).
- Ability to execute continuous monitoring, vulnerability remediation, compliance reporting, and improve repeatable processes.
- Must be a U.S. Person (U.S. Citizen or U.S. Permanent Resident) residing in the United States and able to obtain a U.S. OPM NACI clearance.
Nice to have
- Experience in regulated industries and knowledge of privacy/compliance frameworks such as GDPR, CCPA, and key NIST standards.
- Professional certifications such as CISSP, CISM, CISA, or IAPP; AI-tool and OSCAL experience is also noted as a strong plus.
Pay
USD 120K – USD 145K base salary
Tools
FedRAMP, GovRAMP, NIST SP 800-53 rev 5, Wiz, Burp Suite, AWS, OSCAL, ChatGPT
AI focus
Design AI-enabled and automation-first compliance workflows, including AI-assisted RFP response tools, to reduce manual effort and scale compliance operations.
Model-written summary · the original posting is authoritative