other
Posted Apr 14GRC Analyst – Public Sector
at Socure
United StatesHybrid
Responsibilities
- - Coordinate recurring continuous monitoring compliance activities such as access reviews, incident response exercises, and contingency plan testing.
- ACCESS MANAGEMENT & TRAINING - Design scalable and automated access validation mechanisms integrated with identity and infrastructure systems - Design, implement and deliver FedRAMP training programs to promote compliance awareness - Create and manage automated workflows to improve efficiency.
- AUDIT & ASSESSMENT READINESS - Transform compliance evidence from static repositories into dynamic, system-driven evidence models supporting real-time audit readiness - Conduct internal reviews of logged events and control activities, escalating issues or gaps to the Director of GRC and provide status updates and reports highlighting trends, risks, and remediation progress.
- - Monitor regulatory and industry trends for potential impacts to compliance strategy.
- - Support development of external communications such as press releases and customer-facing materials related to security certifications and authorizations.
- - Build and maintain scalable response frameworks (e.g., answer libraries, structured content, or AI-assisted tools) to provide consistency, accuracy, and speed across RFP and RFx responses MONITOR EVOLVING
- requirements and perform gap analyses including - Updates to applicable NIST Special Publications and other government standards - Contract security
Requirements
- WHAT YOU'LL DO COMPLIANCE & CERTIFICATION MANAGEMENT - Day-to-day coordination and execution of externalThird Party Assessment Organization (3PAO) assessments and responding to auditor requests for evidence and documentation.
- CONTINUOUS MONITORING & VULNERABILITY MANAGEMENT - Design and evolve an automation-first continuous monitoring program leveraging system integrations, telemetry, and real-time data pipelines - Lead the day-to-day FedRAMP continuous monitoring process including vulnerability management lifecycle, from identification through remediation and verification, coordinating with Security, Engineering, and DevOps teams to address issues identified with tools such as Wiz, Burp Suite, AWS native services, and other
- PROCESS IMPROVEMENT & COLLABORATION - Collaborate with the Director of GRC to design automation-first and AI-enabled workflows that reduce manual effort and enable scalable compliance operations - Support the development, rollout, and maintenance of machine-readable compliance documentation (e.g., OSCAL or comparable structured formats) to facilitate interoperability - Partner with automation and engineering teams to integrate structured compliance data into Socure’s broader risk management and monitoring
- experience with FedRAMP, GovRAMP, and NIST frameworks (800-53, 800-63, 800-171). - Proven ability to manage continuous monitoring, vulnerability remediation, and compliance reporting. -
- Experience using AI tools (e.g., ChatGPT, Glean, Gemini) and machine-readable formats (e.g., OSCAL) to automate and streamline compliance processes. - Strong communication, organization, and collaboration skills with the ability to manage multiple priorities. - Ability to adapt to changing requirements -
- Experience supporting or leading responses to security questionnaires, RFPs, or public sector RFx processes - Must be a U.S. Person (U.S. Citizens or U.S.
Experience
- requirements and processes as the program evolves - Provide input to standards bodies on evolving standards when applicable WHAT YOU BRING - 5+ years of cybersecurity or identity management experience, including 1+ year in the public sector. - Direct
Additional details
- WHY SOCURE? Socure is building the identity trust infrastructure for the digital economy — verifying 100% of good identities in real time and stopping fraud before it starts.
- The mission is big, the problems are complex, and the impact is felt by businesses, governments, and millions of people every day.
- We hire people who want that level of responsibility.
- People who move fast, think critically, act like owners, and care deeply about solving customer problems with precision.
- If you want predictability or narrow scope, this won’t be your place.
- If you want to help build the future of identity with a team that holds a high bar for itself — keep reading.
- ABOUT THE ROLE Socure is seeking an Analyst, GRC – Public Sector to execute and enhance the company’s governance, risk, and compliance operations for its public sector business.
- Reporting to the Director of GRC – Public Sector, this role drives measurable improvements in compliance efficiency and audit readiness by managing vulnerability remediation, continuous monitoring, access oversight, and evidence preparation that allow Socure to meet the rigorous standards of FedRAMP, GovRAMP, and related frameworks.
- The Analyst collaborates across Security, Engineering, IT, DevOps, Product, Legal, and other teams to operationalize regulatory requirements, automate workflows, and offers the opportunity to shape the GRC strategy for Socure’s fast-growing public sector business.
- This role is expected to challenge traditional GRC approaches and build automation-first, system-driven solutions that reduce manual effort and enable continuous compliance.