Apply on Employer Site

Aretum · 2 days ago

Governance, Risk, and Compliance (GRC) Specialist - Contingent

Washington, District of Columbia, United States

Full-time

Hybrid

Mid Level

Aretum is a mission-driven organization committed to delivering innovative, technology-enabled solutions to customers across defense, civilian, and homeland security sectors. The GRC Specialist supports federal cybersecurity governance, risk management, and compliance activities by implementing and maintaining an effective risk program aligned with FISMA and the NIST Risk Management Framework (RMF).

ConsultingInformation Technology

Growth Opportunities

No H1B

U.S. Citizen Only

Responsibilities

Support governance and compliance activities aligned to FISMA and agency cybersecurity requirements, including maintaining documentation and reporting support where applicable

Execute RMF-aligned risk activities across the system lifecycle, including control selection support, implementation validation, and ongoing continuous monitoring

Maintain and update authorization/compliance artifacts (as required by the environment), such as security plans and supporting evidence, ensuring documentation is accurate and audit-ready

Assist with security control assessment coordination by preparing artifacts, mapping evidence to controls, tracking assessment activities, and supporting remediation planning (Assessment methods and procedures are commonly aligned to NIST 800-53A practices)

Develop, manage, and track POA&Ms and remediation actions; collect and validate closure evidence and support risk acceptance processes as needed

Demonstrate and apply working knowledge of network design concepts and partner with technical teams to validate secure configurations and identify weaknesses

Support vulnerability management and security testing coordination for government systems to identify and document vulnerabilities, validate severity/impact, and track mitigation to completion

Support project management activities including work planning, task tracking, stakeholder coordination, meeting facilitation, and status reporting for GRC deliverables

Contribute to policy/standard development and continuous improvement initiatives for governance and risk processes using NIST-aligned control frameworks

Qualification

FISMA complianceNIST Risk Management FrameworkSecurity control assessmentVulnerability managementNetwork design conceptsProject managementDocumentation managementStakeholder coordinationContinuous improvement

Required

Public Trust Eligibility Required