[Hiring] GRC Tool Administrator @Saliense

Role Description

The GRC RegScale Administrator is responsible for the administration, configuration, optimization, and lifecycle support of the organization’s RegScale GRC platform. This role provides hands-on technical and functional support for Governance, Risk, and Compliance (GRC) operations, including:

• System migrations
• Data integrity management
• RMF workflows
• Integrations
• Audit readiness

The Administrator serves as a key technical liaison between cybersecurity, compliance, IT operations, and system owners to ensure GRC processes are scalable, secure, and aligned with federal mandates and government policies.

Qualifications

• Minimum five (5) years of experience in listed tasks
• Bachelor’s degree
• Experience administering multiple GRC platforms including RegScale and CSAM
• Experience supporting RMF authorization, ATO, and continuous monitoring
• Demonstrated experience supporting GRC system migrations or platform enhancements
• Strong knowledge of NIST RMF, NIST SP 800-53 Rev. 5, and FISMA
• Familiarity with AWS, Azure, and GCP compliance tooling
• Experience with APIs, integrations, and compliance automation
• Strong documentation, collaboration, and communication skills

Requirements

• Administer, configure, and maintain the RegScale GRC platform across production, staging, and development environments
• Support releases, upgrades, patches, regression testing, rollback planning, and post-deployment validation
• Ensure platform health, audit logging, access controls, and configuration baselines
• Configure and maintain RMF workflows, POA&Ms, risk acceptance, and authorization packages
• Maintain SSPs, FISMA artifacts, and continuous monitoring documentation
• Support ATO, reauthorization, and audit readiness activities
• Support migrations from legacy GRC platforms, spreadsheets, or manual tracking solutions into RegScale
• Perform data mapping, normalization, cleansing, validation, and reconciliation
• Develop migration runbooks, cutover strategies, rollback plans, and post-migration validation
• Coordinate migration activities with system owners, ISSOs, auditors, and vendors
• Develop and maintain integrations with SIEM, asset management, vulnerability scanning, IAM, and cloud platforms (AWS, Azure, GCP)
• Implement APIs and automated data feeds to synchronize compliance and risk data