[Hiring] Senior Engineer, Governance, Risk & Compliance @NextGen Federal Systems

Role Description

The Sr. Security Engineer develops solutions leveraging Governance, Risk & Compliance (GRC) platforms, security technologies, and automation to support Information Security and GRC operations. The ideal candidate has experience administering enterprise GRC platforms, configuring workflows, automating business processes, integrating technologies, and developing operational reporting, dashboards and workflow automation to support:

• Audit
• Compliance
• Enterprise Risk
• Third-Party Risk Management (TPRM)
• Identity Governance
• Privacy
• Business Continuity
• Security Awareness
• AI Governance

• Develop solutions using GRC platforms, security technologies, and automation to support Information Security and GRC initiatives.
• Serve as system administrator for enterprise GRC platforms and supporting technologies.
• Configure and maintain GRC workflows, forms, questionnaires, dashboards, control libraries, evidence management, and reporting capabilities.
• Perform platform administration, upgrades, testing, user provisioning, troubleshooting, release validation, and technical support.
• Provide technical and operational support for the TPRM platform.
• Configure and administer Identity Governance workflows.
• Administer Phishing tool and related security awareness technologies.
• Collect operational metrics from various teams and develop CISO dashboards and reports.
• Configure workflow automation across GRC platforms.
• Support integration of GRC platforms with various systems.
• Provide technical support for audit and compliance platforms.
• Configure and administer Privacy Impact Assessment (PIA) and Data Protection Impact Assessment (DPIA).
• Configure and support Business Continuity and Disaster Recovery (BC/DR) technologies.
• Configure and support AI Governance technologies.
• Collaborate with various stakeholders to support GRC platform operations.
• Support customer security assessments and compliance initiatives.
• Create and maintain technical documentation and standard operating procedures (SOPs).
• Identify opportunities to optimize GRC technologies.
• Stay current with GRC technologies and apply them to existing processes.

Qualifications

• Bachelor's Degree in Computer Science or related discipline or advanced degree.
• Or, any combination of education and experience which would provide the required qualifications for the position.

Requirements

• 4-6 years of relevant experience or advanced Degree.
• Experience administering, configuring, and supporting Governance, Risk & Compliance (GRC) platforms.
• Experience with GRC platforms, security technologies, tools, or processes.
• Experience with one or more governance and compliance frameworks.
• Experience working in an environment with compliance programs.
• Experience working with IT partners and adequate exposure to their areas.

License/Certification

• Information security or cybersecurity related certifications such as CISA, CISSP, CISM, CRISC or ability to acquire certification within 18 months.
• HITRUST Framework and CSF certification knowledge.

Knowledge, Skills & Abilities

• Knowledge of Governance, Risk & Compliance (GRC), information security and cybersecurity principles.
• Skill in information security, GRC platform administration, workflow automation, and technical documentation.
• Ability to determine how enterprise platforms and workflows should operate.