Knoxville, TN · On-site
$25.25 - $34/hr
C2 Labs is looking for a Junior FedRAMP Consultant (GRC Analyst I) to support technical writing and ... entry-level security certification. Tools & environment • RegScale (linking evidence, updating ...
Knoxville, TN · On-site
$25.25 - $34/hr
C2 Labs is looking for a Junior FedRAMP Consultant (GRC Analyst I) to support technical writing and ... entry-level security certification. Tools & environment • RegScale (linking evidence, updating ...
| Aspect | Entrylevel Grc Analyst | Entry-level Compliance Analyst |
|---|---|---|
| Credentials | Bachelor's degree in finance, accounting, or related field; certifications like CFE or CRC are a plus | Bachelor's degree in law, business, or related field; compliance certifications like CCEP or CAMS are common |
| Work Environment | Financial institutions, corporations, consulting firms | Regulatory agencies, financial institutions, corporations |
| Job Focus | Risk management, governance, controls, and compliance frameworks | Regulatory adherence, policy implementation, audit support |
The Entrylevel Grc Analyst and Entry-level Compliance Analyst roles share similar educational backgrounds and work environments, focusing on compliance and risk management. However, GRC analysts tend to have a broader scope including governance and controls, while compliance analysts focus more on regulatory adherence and policy enforcement. Both roles are essential in maintaining organizational compliance and often overlap in financial and corporate sectors.
$25.25 - $34/hr
Other
This job post has expired today. Applications are no longer accepted.
C2 Labs is looking for a Junior FedRAMP Consultant (GRC Analyst I) to support technical writing and evidence operations for FedRAMP authorization and ongoing ConMon. This is a great role if you’re detail-oriented, enjoy structured writing, and want hands-on exposure to FedRAMP delivery.
What you’ll do
• Support drafting and formatting of SSP/KSI artifacts, policies, and plans.
• Collect and organize evidence; maintain traceability in RegScale.
• Maintain trackers for actions, evidence requests, and POA&Ms.
• Help compile monthly/quarterly ConMon reporting inputs.
Role summary
Support package development and ConMon operations through structured documentation, evidence operations, and coordination support. This role is ideal for a junior GRC professional who is a strong writer and wants to build FedRAMP experience in a delivery team.
Key responsibilities
• Support drafting and formatting of FedRAMP artifacts (SSP sections, KSI summaries, policies, plans, appendices) under Senior Consultant guidance.
• Collect, organize, and quality-check evidence artifacts (naming standards, version control, completeness) and link evidence in RegScale.
• Maintain trackers for open actions, evidence requests, POA&M items, and deliverable status.
• Capture meeting notes and translate outcomes into updated documents, RegScale tasks, or action items.
• Support ConMon deliverables: compile scan outputs, update inventories/POA&Ms, and prepare monthly/quarterly reporting packages.
• Perform internal quality checks for template fidelity, cross-references, and completeness before SME review.
Key deliverables / outputs
• Well-formatted draft artifacts and appendices ready for Senior/SME review.
• Clean evidence library with links and traceability maintained in RegScale.
• Up-to-date action/evidence/POA&M trackers and ConMon reporting inputs.
Required qualifications
• Associates degree in IT, Cybersecurity, or related field
• 1–3 years experience in GRC, audit support, compliance operations, or security documentation.
• Strong written communication and attention to detail (templates, tables, and structured documents).
• Basic familiarity with NIST 800-53 concepts or willingness to learn quickly.
• Comfort working with spreadsheets and tracking artifacts across multiple stakeholders.
• Reliable follow-through and responsiveness in a fast-moving delivery environment.
Preferred / nice to have
• Any FedRAMP exposure (coursework, prior engagement support, or template familiarity).
• Experience with GRC tools (RegScale, ServiceNow GRC, Archer) and/or ticketing systems.
• Security+ or similar entry-level security certification.
Tools & environment
• RegScale (linking evidence, updating workflows, POA&M maintenance)
• Microsoft Word/Excel (FedRAMP templates and attachments)
• Teams/SharePoint and customer-approved artifact repositories
Engagement details
• 1099 independent contractor (initial engagement); project-based with potential extension.
• Remote-first; minimal travel expected.
• No clearance required; must be able to pass a standard background check and sign NDA/SOW.
• Hours vary by customer phase; consistent availability during business hours is important.
Practical AI Application
EEO Statement
We are an equal opportunity employer. All qualified applicants will be considered without discrimination based on race, color, religion, sex, national origin, age, disability, or protected veteran status. Employment offers will be contingent on passing a pre-employment drug screen.