GRC Automation Engineer (Cybersecurity)

TL;DR

GRC Automation Engineer (Cybersecurity): Modernizing and automating cybersecurity governance processes for the National Institutes of Health (NIH) with an accent on reducing manual effort across the Risk Management Framework (RMF) lifecycle. Focus on developing automated workflows, integrating enterprise cybersecurity data sources, and streamlining compliance evidence collection.

Location: Remote (Must be based in the US to support federal agency requirements)

Company

A fast-growing cybersecurity firm recognized as a Best Place to Work, specializing in security resilience and governance for federal agencies.

What you will do

• Design, develop, and maintain automated workflows for RMF, Assessment and Authorization (A&A), and continuous monitoring.
• Integrate GRC platforms (JCAM, ServiceNow) with vulnerability management systems, security tools, and ticketing platforms via REST APIs.
• Automate evidence collection, control validation, and recurring compliance reporting to improve data accuracy.
• Create executive dashboards and operational reporting using automated data aggregation and visualization.
• Evaluate and implement AI and machine learning capabilities to improve documentation quality and workflow efficiency.
• Collaborate with RMF analysts and ISSOs to identify and automate manual governance processes.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or a related technical field.
• 3+ years of experience developing automation solutions for cybersecurity, governance, or compliance.
• Proficiency in scripting and automation using Python, PowerShell, or JavaScript.
• Experience integrating enterprise platforms through REST APIs and web services.
• Working knowledge of NIST RMF, FISMA, and federal cybersecurity governance processes.
• Must be eligible to support US Federal civilian agencies (NIH/HHS).

Nice to have

• Experience with JCAM, eMASS, ServiceNow GRC, Archer, or Microsoft Power Platform.
• Knowledge of Continuous Diagnostics and Mitigation (CDM) and enterprise cybersecurity operations.
• Certifications such as Security+, CISSP, CGRC, or AWS/Azure Developer Associate.
• Familiarity with AI-assisted workflow automation and document generation.
• Experience working in Agile development environments.

Culture & Benefits

• Award-winning workplace recognized as a "Best Place to Work" (2023, 2025).
• People-first corporate culture with a strong dedication to excellence.
• High-growth environment (Inc. 5000 honoree).
• 100% remote work flexibility.