GRC Analyst – Cybersecurity at Skyward Federal

Washington, District of Columbia, United States -

Full Time

Start Date

Immediate

Expiry Date

04 Feb, 26

Salary

110000.0

Posted On

06 Nov, 25

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Governance, Risk Management, Compliance, Cybersecurity, Documentation, NIST Frameworks, Security Controls, Technical Writing, CMMC Certification, Security Assessments, Authorization, Vulnerability Management, Team Collaboration, Continuous Monitoring, Security Requirements Integration, RMF Process

Industry

Software Development

Description

Your Impact: Enable Skyward Federal’s mission by driving governance, risk, and compliance (GRC) efforts that safeguard sensitive multi-domain solutions. You will ensure our systems meet evolving cybersecurity standards across classified and unclassified environments through rigorous documentation, compliance oversight, and partnership with mission teams. Your expertise strengthens authorization, accountability, and trust in our platforms. This position requires eligibility for a Top Secret security clearance; currently active clearance heavily preferred. Where You'll Take Charge: RMF Implementation - Drive systems through Assessment and Authorization (A&A) process Security Controls Management - Implement security controls, validate compliance status, and document results in reporting systems (eMASS, Xacta, Excel, etc.) Documentation & Reporting - Maintain comprehensive cybersecurity documentation Compliance Strategy - Support CMMC certification and additional compliance efforts Guide systems through RMF process from categorization through continuous monitoring Develop and maintain security documentation including SSPs, POA&Ms, SCTMs, and other Body of Evidence (BoE) artifacts Implement and assess NIST 800-53 security controls Support preparation and execution of CMMC certification Conduct security control assessments and maintain evidence of compliance Coordinate with security assessors and authorizing officials Partner with development teams to integrate security requirements Track and remediate security findings and vulnerabilities Your Edge: Deep understanding of RMF process and NIST frameworks Excellence in security control implementation and assessment Strong technical writing and documentation skills Ability to translate requirements into actionable controls Experience with security assessment and authorization Experience with classified system authorizations Familiarity with CMMC requirements U.S. citizenship is required to meet eligibility for a TS security clearance Growth Potential: RMF Admin > Sr RMF Admin > Info Sys Manager > Sr Info Sys Manager > CISO Compensation and Benefits: Targeted Compensation: 95-110K base salary 10% 401k match, 100% immediately vested 100% employer-paid health, dental & vision coverage 100% employer-paid short and long term disability benefits 100% employer-paid life insurance policy 20 days of flexible paid time off 11 federal holidays and 2+ Skyward holidays Unlimited sick & bereavement leave events Company issued laptop, mobile phone and expense card $5,000 per year tax-exempt educational reimbursement $250 office set-up stipend $50 monthly internet stipend $60 monthly coffee budget ☕ Additional discretionary benefits throughout the year About Skyward Federal Skyward Federal solves ultra-sensitive multi-domain challenges that others can't, primarily supporting national defense. Our mission is to enable those who protect us. We challenge the status quo and ensure our solutions have a meaningful and lasting impact to our clients' missions. We have a flexible, collaborative start-up environment, fostering innovation and teamwork. We prioritize the development of our people, knowing that our success is driven by their talent and dedication. Skyward Core Values: Impact Mission - Move fast. Execute with precision. Deliver results. Take Initiative - Don't hesitate. Dive in. Get shit done. Empower People - Take point. Make a difference. Feed the team. Pursue Excellence - Stay curious. Keep improving. Push boundaries.

Responsibilities

Drive governance, risk, and compliance efforts to safeguard sensitive multi-domain solutions. Ensure systems meet evolving cybersecurity standards through documentation, compliance oversight, and collaboration with mission teams.