Governance, Risk & Compliance Engineer

Summary

DP Professionals is recruiting for a cybersecurity-industry client seeking a Governance, Risk & Compliance Engineer. The role supports government Authorization to Operate processes, security governance, risk management, compliance documentation, control assessments, audits, and continuous monitoring, while using AI tools and automation to improve GRC workflows.

Responsibilities

• Support governance, risk, and compliance activities across information systems and security programs
• Perform and support Authorization to Operate (ATO) activities within government environments
• Develop, maintain, and manage security documentation, including System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), risk assessments, and related compliance artifacts
• Assist with security control implementation, assessment, validation, and continuous monitoring
• Coordinate with cybersecurity, engineering, IT, and program teams to address security and compliance requirements
• Identify, document, and track security risks and remediation activities
• Support audits, assessments, and government compliance reviews
• Use AI tools and automation technologies to improve GRC processes, documentation, analysis, and workflow efficiency
• Translate technical security requirements into actionable compliance and risk-management activities
• Stay current with applicable cybersecurity frameworks, government security requirements, and evolving compliance practices

Skills

• US Citizen; must be able to obtain/maintain a U.S. security clearance
• 1–3 years of professional experience in Governance, Risk & Compliance, cybersecurity, information assurance, or a related field
• Direct hands-on experience performing or supporting government ATOs — candidates should have completed or substantially participated in at least one or two government ATO processes
• Understanding of cybersecurity governance, risk management, security controls, and compliance processes
• Experience creating or maintaining security and compliance documentation
• Strong analytical, organizational, and written communication skills
• Experience using AI tools to support cybersecurity, compliance, documentation, research, or workflow automation
• Experience with NIST Risk Management Framework (RMF) and related NIST publications
• Familiarity with government security frameworks and authorization processes
• Experience with POA&Ms, SSPs, security control assessments, and continuous monitoring
• Cybersecurity or GRC-related certifications such as Security+, CySA+, CAP, CISM, or CISSP
• Experience working with GRC platforms or security compliance management tools
• Familiarity with AI-assisted cybersecurity and compliance workflows

Qualifications

Must Haves

• US Citizen; must be able to obtain/maintain a U.S. security clearance
• 1–3 years of professional experience in Governance, Risk & Compliance, cybersecurity, information assurance, or a related field
• Direct hands-on experience performing or supporting government ATOs — candidates should have completed or substantially participated in at least one or two government ATO processes
• Understanding of cybersecurity governance, risk management, security controls, and compliance processes
• Experience creating or maintaining security and compliance documentation
• Strong analytical, organizational, and written communication skills
• Experience using AI tools to support cybersecurity, compliance, documentation, research, or workflow automation

Nice to Haves

• Experience with NIST Risk Management Framework (RMF) and related NIST publications
• Familiarity with government security frameworks and authorization processes
• Experience with POA&Ms, SSPs, security control assessments, and continuous monitoring
• Cybersecurity or GRC-related certifications such as Security+, CySA+, CAP, CISM, or CISSP
• Experience working with GRC platforms or security compliance management tools
• Familiarity with AI-assisted cybersecurity and compliance workflows

Benefits

• Fully remote work