138 grc jobs at 74 companies in Fredericksburg, VA
3w
Save
Mark Applied
Hide
3w
GRC Engineer III
Fairfax or Lafayette or Knoxville
$144k-$311k/yrHybridFull Time
CGINYSE: GIB: Provides information technology and business consulting services.
9+ YOEBachelor's in cyber field, 9+ years relevant experience, experience with ServiceNow/Archer/eMASS, RMF automation, FAIR, AI governance familiarity, strong communication and executive engagement skills.
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or Charlotte or Philadelphia or Portland or San Francisco or Seattle or North America
$123k-$213k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
3+ YOERequires 3–5+ years of SAP Security/GRC experience, bachelor's degree preferred, SAP implementation expertise, GRC Access Control and IAM experience, U.S. driver's license, passport, and willingness to travel up to 80%.
SAP Application Security, SAP GRC Access Control, S/4HANA, SAP ECC, FIORI, ARIBA, HCM, SuccessFactors, Saviynt, SailPoint, SAP IAG, ServiceNow, HP ALM, BTP, SAC, AI, RPA
SAP GRC (Governance, Risk, and Compliance) Consultant
Washington, District of Columbia, United States
$100k-$203k/yrOnsiteFull Time
Accenture Federal ServicesNYSE: ACN: Provides technology and consulting services to U.S. federal agencies.
4+ YOE4+ years experience with SAP CAR and POS/e‑commerce integrations, SAP S/4HANA knowledge, retail data flows, ability to diagnose data transfer issues, US citizenship and ability to obtain government clearance.
Virtru: Provides data-centric encryption and privacy control software for organizations.
5+ YOE5+ years in information security/GRC or IT audit, deep knowledge of CMMC/NIST/FedRAMP/SOC2/PCI, cloud and GRC tool experience, strong communication and risk assessment skills.
xAI: Develops advanced artificial intelligence systems to understand the universe.
8+ YOE8+ years GRC/security compliance experience in fintech or financial services; hands-on PCI/NYDFS/FFIEC experience; Compliance-as-Code and GRC automation; technical fluency with cloud and security architecture.
Digital Global Connectors: Provides cybersecurity, engineering, and compliance services to federal agencies.
5+ YOEBachelor's degree, 5+ years performing RMF/GRC security control assessments using NIST SP 800-53, experience supporting ATO and continuous monitoring, strong technical writing and analytical skills, U.S. citizenship and ability to obtain Tier 2 Public Trust.
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
8+ YOE8+ years in ISSO/SCA/ISSE/ISSM roles, experience configuring and automating GRC platforms (ServiceNow, Archer, Xacta, eMASS), knowledge of NIST frameworks and federal security standards, HS diploma/GED, U.S. citizenship required.
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
8+ YOE8+ years in ISSO/SCA/ISSE/ISSM roles; experience configuring and automating GRC platforms (ServiceNow, Archer, Xacta, eMASS); strong process/change management, policy-to-implementation translation, and knowledge of NIST RMF/FISMA/FedRAMP; U.S. citizenship required.
ServiceNow, Archer, RSA Archer, Xacta, Telos Xacta, eMASS, CSAM, API
CyberLinx Solutions: Provides specialized cybersecurity and IT services to federal agencies.
8+ YOE3+ MgmtBachelor's in a related field, 8+ years in cybersecurity with 3+ years of GRC leadership, strong knowledge of NIST CSF/RMF and NIST SP 800-53/800-171, audit/compliance experience, and executive communication skills.
United States Senate: The upper chamber of the United States federal legislature.
7+ YOERequires 7–10 years of cybersecurity experience, cybersecurity domain expertise, leadership of project teams, strategic policy and framework development, high school diploma or GED, and eligibility for a Secret clearance as a U.S. citizen.
AptNexus: A provider of information technology and security services.
7+ YOESenior ISSO with 7-10 years in federal or federal contractor environment; proficient in RMF/NIST controls; SA&A packaging; GRC tools; cloud security; active Secret clearance.
United States Senate Sergeant at Arms: Managing security, technology, and protocol for the U.S. Senate.
8+ YOEBachelor's in CS/IT/Engineering or equivalent, 8+ years as lead software engineer, deep ServiceNow SecOps/GRC experience, ServiceNow platform design and integration skills, Secret clearance required, U.S. citizenship.
ECSNYSE: ASGN: Provides advanced technology and engineering services to government agencies.
5+ YOERequires active Secret clearance with Top Secret eligibility, a relevant bachelor's degree, 5+ years of information security experience, assessment team experience, GRC tools, NIST controls, RMF, and technical control testing.
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
5+ YOE5+ years compliance, audit, or risk management experience; Bachelor’s degree or equivalent required; deep knowledge of COSO 2013, SEC/PCAOB, ITGCs, SOX scoping, control design, testing, remediation, and GRC platforms.
Covington & Burling: Global law firm providing legal and regulatory counseling services.
15+ YOE10+ Mgmt15+ years cybersecurity experience with 10+ years running GRC functions; Bachelor's required; CISSP/CISM/CRISC/CISA preferred; experience with NIST, ISO 27001, GDPR, HIPAA, CMMC; strong communication and stakeholder leadership.
GRC, NIST CSF, ISO 27001, EU/UK GDPR, HIPAA, CMMC, ITAR/EAR
Second Front Systems: Secure cloud hosting and automated compliance for government software.
5+ YOE5+ years in security compliance/GRC with FedRAMP experience; experience authoring SSPs/POA&Ms; knowledge of NIST 800-53/800-37 and FedRAMP; TS/SCI eligibility; CISSP/CISM/Security+; strong written communication.
TelosNASDAQ: TLS: Provides cyber, cloud, and enterprise security solutions for government and commercial clients.
5+ YOEActive TS/SCI clearance and US citizenship, 5+ years IT experience (degree may be substituted), DOD 8140 eligibility, cloud provider experience (AWS/Azure/GCP), RMF/GRC and audit experience, strong analytical and communication skills.