Cloud Security GRC Consultant

We are seeking a Cloud Security GRC Consultant to join our team. As a consultant, you will be responsible for applying federal security frameworks to modern, complex Google Cloud environments.

Responsibilities:

• Collaborate with cross-functional teams in an Agile environment
• Stay current with the latest Google Cloud services and technologies
• Implement security best practices for Google Cloud solutions
• Contribute to federal compliance requirements, including FedRAMP, NIST SP 800-53, and agency-specific security overlays
• Develop and implement innovative methods to achieve compliance with government and commercial cybersecurity frameworks
• Conduct technical security control assessments and identify gaps, risks, and recommended mitigations
• Partner with cloud architecture and engineering teams to provide actionable compliance guidance
• Utilize Google Cloud native tools and features to aid in continuous monitoring, vulnerability management, and security posture management
• Support reviews with Authorizing Officials, security assessors, and federal agency security teams
• Develop clear, compelling Plan of Action and Milestones entries
• Support strategic consulting efforts on evolving federal cloud security policy and best practices

Qualifications:

• 2+ years of relevant experience
• At least one Google Cloud Professional Certification
• Experience supporting RMF processes, acting as an ISSO, Security Controls Validator, or performing information assurance engineering
• Hands-on experience with eGRC tools like eMASS and XACTA
• Ability to clearly communicate complex security concepts to technical and non-technical stakeholders
• Strong problem-solving skills with a proven ability to quickly learn and apply new technologies
• Familiarity with cloud automation, Infrastructure as Code, or scripting
• Understanding of Google Cloud services and technologies
• B.A. or B.S. in Information Security, Computer Science, or related discipline
• US Citizenship and clearable up to a Secret Security Clearance

Preferred Qualifications:

• Experience working within Agile teams
• Experience working with Google Cloud compliance products
• Hands-on experience with modern compliance automation, OSCAL, Python, or Infrastructure as Code
• Experience working with customers in the U.S. Public Sector
• U.S. Federal Government security clearance
• Experience with DoD/DISA cybersecurity policies

The salary range for this position is estimated to be between $100,000.00 - $140,000.00, commensurate on experience and technical skillset.