SecurePro is seeking a motivated and detail-oriented Associate Governance, Risk, and Compliance (GRC) Analyst to

support a federal cybersecurity program in Washington, DC. The team provides cybersecurity governance, risk

management, and compliance support across a portfolio of approximately 32 FISMA Moderate information systems.

The Associate GRC Analyst will work under the guidance of experienced cybersecurity professionals, including Senior

and Lead Information System Security Officers (ISSOs), to support federal security compliance activities, risk tracking,

documentation management, continuous monitoring, and audit preparation.

This is a hands-on, on-site position designed for an early-career professional interested in developing a career in

cybersecurity governance, risk management, compliance, and federal information security.

The ideal candidate has strong organizational and analytical skills, attention to detail, a basic understanding of

cybersecurity concepts, and an interest in learning federal security frameworks and compliance processes.

Key Responsibilities

• Assist with day-to-day cybersecurity governance, risk management, and compliance activities supporting federal

information systems.

• Support Risk Management Framework (RMF) activities in accordance with NIST SP 800-37 and applicable federal

cybersecurity requirements.

• Collect, organize, and maintain cybersecurity documentation, assessment records, and compliance evidence.

• Assist with maintaining System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and

Milestones (POA&Ms), and other security documentation.

• Track security findings, remediation activities, action items, and compliance deadlines.

• Support the maintenance of cybersecurity records and authorization information in CSAM or other Governance,

Risk, and Compliance (GRC) platforms.

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Business, or

a related field.

SECUREPRO • CAREERS Page 3

SECUREPRO Associate GRC Analyst / Position Description

• Academic coursework, internships, or professional exposure to cybersecurity, IT auditing, risk management, or

regulatory compliance.

• Familiarity with NIST SP 800-53, NIST SP 800-37, FISMA, or the Risk Management Framework (RMF).

• Basic understanding of security assessments, compliance reviews, or authorization processes.

• Familiarity with System Security Plans (SSPs), POA&Ms, or security control documentation.

• Exposure to CSAM, ServiceNow, Splunk, or other cybersecurity and compliance management tools.

• Familiarity with vulnerability management tools such as Tenable Nessus, Qualys, or ACAS.