ZipRecruiter

Log In

1

Cgrc Jobs in Springfield, VA (NOW HIRING)

asrcfh

Senior Information Security Engineer

Reston, VA · Remote

$110K - $150K/yr

Certified in Governance, Risk and Compliance (CGRC) or Certified Cloud Security Professional (CCSP) Preferred Qualifications * Experience supporting U.S. federal civilian agencies, preferably the ...

asrcfh

Cybersecurity Program Manager

Reston, VA · Remote

$115K - $156K/yr

Certified in Governance, Risk and Compliance (CGRC) or Certified Cloud Security Professional (CCSP) Preferred Qualifications * Experience supporting U.S. federal civilian agencies, preferably the ...

previous pagenext page

Showing results 21-40

All JobsCgrc JobsCgrc Jobs in Springfield, VA

Cgrc information

What is a CGRC professional?

CGRC professionals, or Certified in Governance, Risk and Compliance, are experts who help organizations manage risk, ensure regulatory compliance, and establish effective governance frameworks. They analyze processes, identify potential risks, and develop policies to maintain compliance with laws and industry standards. CGRC certification, previously known as CAP (Certified Authorization Professional), is offered by (ISC)² and validates knowledge in governance, risk management, and compliance best practices. These professionals often work in cybersecurity, IT, or regulatory roles across various industries.

What are the key skills and qualifications needed to thrive as a Cybersecurity Governance, Risk, and Compliance (CGRC) professional?

To thrive as a CGRC professional, you need a solid understanding of cybersecurity frameworks, risk management, and regulatory compliance, typically supported by a relevant degree and certifications such as CISSP, CISA, or CGRC (formerly CAP). Familiarity with GRC platforms like Archer, ServiceNow GRC, or RSA, as well as knowledge of NIST, ISO, or HIPAA standards, is commonly required. Strong analytical skills, attention to detail, and effective communication are crucial soft skills for interpreting regulations and collaborating across teams. These competencies ensure organizations remain secure and compliant, minimizing risk and avoiding costly penalties.

What are some common challenges CGRC professionals face when managing compliance across multiple frameworks?

CGRC (Cybersecurity Governance, Risk, and Compliance) professionals often encounter the challenge of aligning organizational policies with the requirements of various regulatory frameworks, such as NIST, ISO 27001, and GDPR. This can involve interpreting overlapping or conflicting controls and ensuring consistent documentation and reporting. Additionally, they must facilitate communication and collaboration between IT, legal, and business teams to ensure all stakeholders understand and meet compliance obligations. Keeping up with the evolving regulatory landscape and adapting internal processes accordingly is also a key aspect of the role.

What is the difference between Cgrc vs Compliance Analyst?

AspectCgrcCompliance Analyst
CertificationsCertifications like CFE, CISA, or CMMC often preferredCertifications such as CCEP, CISA, or CIA common
Work EnvironmentTypically in cybersecurity, risk management, or compliance teams within organizationsUsually in corporate compliance departments, auditing firms, or regulatory agencies
Industry UsageUsed in industries like finance, healthcare, and government for cybersecurity and risk managementCommon across various industries for regulatory compliance and risk assessment

The Cgrc (Certified Government Risk Compliance) focuses on government-specific regulations and cybersecurity risk management, while a Compliance Analyst generally handles broader regulatory compliance across industries. Both roles require understanding of compliance frameworks, but Cgrc emphasizes government standards and cybersecurity, making it more specialized in those areas.

What are popular job titles related to Cgrc jobs in Springfield, VA?

For Cgrc jobs in Springfield, VA, the most frequently searched job titles are:

What cities near Springfield, VA are hiring for Cgrc jobs?

Cities near Springfield, VA with the most Cgrc job openings:

Cgrc jobs near you
Infographic showing various Cgrc job openings in Springfield, VA as of July 2026, with employment types broken down into 82% Full Time, 6% Part Time, and 12% Contract. Highlights an 89% Physical, 4% Hybrid, and 7% Remote job distribution.

Lead Information System Security Officer (ISSO)

C3EL

Washington, DC • On-site

Full-time

Posted 4 days ago

Job description

**CONTINGENT UPON CONTRACT AWARD**Overview:

Job Title: Lead Information System Security Officer (ISSO)

Security Clearance: Ability to Obtain Tier 4 High-Risk Public Trust

Location: Washington, D.C.

(Due to the nature of the work and contract requirements, U.S. Citizenship is required.)

Description:

C3EL is seeking a Lead Information System Security Officer (ISSO) to provide on-site cybersecurity and Risk Management Framework (RMF) sustainment support in Washington, D.C., for a new contract. This role will serve as the single point of accountability for technical performance and remain a hands-on cybersecurity practitioner as the technical leader, Government interface, and quality authority for the entire ISSO program.

Responsibilities will include, but not be limited to:

  • Provide on-site cybersecurity and RMF sustainment support.
  • Chair internal quality reviews and ensure deliverables are complete, current, consistent, timely, and audit ready.
  • Manage technical risks, issues, escalations, SLA/KPI/AQL performance, action items, and corrective actions.
  • Support weekly reports, monthly status reports, and quarterly executive reviews, including authorization, vulnerability, POA&M, audit, and staffing status.
  • Lead a team of two Senior ISSOs and maintain coverage during absence, vacancy, surge, or suitability delay.
  • Produce accurate, concise, and audit-ready Government cybersecurity documentation.
  • Support team coverage from 7:00 a.m. to 6:00 p.m. ET (M-F) and participate in after-hours incident coverage as needed.
 Minimum Qualifications:
  • U.S. Citizenship.
  • Eligibility to obtain a Tier 4 High-Risk Public Trust.
  • Minimum ten (10) years in cybersecurity.
  • Minimum seven (7) years in federal RMF/ISSO work.
  • Minimum three (3) years leading ISSO or authorization teams.
  • Hands-on CSAM experience supporting system profiles, controls, evidence, POA&Ms, and authorization workflows.
  • Working knowledge of NIST SP 800-37, 800-53, 800-53B, FIPS 199, FISMA, and applicable CISA/OMB guidance.
  • Familiarity with GRC, ITSM, SIEM, scanner, identity, endpoint, and cloud-security platforms.
  • Direct experience briefing and coordinating with ISSMs, CISOs, AOs, AODRs, System Owners, assessors, and senior Government officials.
  • Direct experience overseeing SSPs, SAPs, SARs, POA&Ms, risk assessments, control statements, and evidence packages.
  • Expert knowledge of all seven RMF steps, ATO, reauthorization, ongoing authorization, control baselines, and inheritance.
  • Working proficiency with ServiceNow, Splunk, and vulnerability-scanning platforms.
Preferred Qualifications:
  • At least one current cybersecurity certification such as CISSP, CGRC, CISM, CRISC, Security+, SecurityX, CCSP, or GIAC.
Education:
  • Associate's degree in Cybersecurity, Information Technology, or related field. (Relevant experience may be considered in lieu of formal education.)

Apply