As a Senior Governance Risk and Compliance (GRC) Analyst and Team Lead at C2 Labs you will lead a team of security analysts and engineers to implement regulatory frameworks such as the Federal ...
As a Senior Governance Risk and Compliance (GRC) Analyst and Team Lead at C2 Labs you will lead a team of security analysts and engineers to implement regulatory frameworks such as the Federal ...
As a Senior Governance Risk and Compliance (GRC) Analyst and Team Lead at C2 Labs you will lead a team of security analysts and engineers to implement regulatory frameworks such as the Federal ...
As a Senior Governance Risk and Compliance (GRC) Analyst and Team Lead at C2 Labs you will lead a team of security analysts and engineers to implement regulatory frameworks such as the Federal ...
Coordinate the execution of security and GRC initiatives (e.g., risk assessments, compliance efforts, security tool implementations, policy updates). * Develop and maintain project plans, timelines ...
Coordinate the execution of security and GRC initiatives (e.g., risk assessments, compliance efforts, security tool implementations, policy updates). * Develop and maintain project plans, timelines ...
Sr. GRC Analyst
Nashville, TN · On-site
$95K - $105K/yr
About the Role The Senior GRC Analyst acts as a strategic lead to advance security and risk operations. In this role, you will integrate people, policy, and technology to drive operational excellence ...
Quick apply
Sr. GRC Analyst
Nashville, TN · On-site
$95K - $105K/yr
About the Role The Senior GRC Analyst acts as a strategic lead to advance security and risk operations. In this role, you will integrate people, policy, and technology to drive operational excellence ...
Sr. GRC Analyst
Knoxville, TN · On-site
$95K - $105K/yr
About the Role The Senior GRC Analyst acts as a strategic lead to advance security and risk operations. In this role, you will integrate people, policy, and technology to drive operational excellence ...
Quick apply
Sr. GRC Analyst
Knoxville, TN · On-site
$95K - $105K/yr
About the Role The Senior GRC Analyst acts as a strategic lead to advance security and risk operations. In this role, you will integrate people, policy, and technology to drive operational excellence ...
Responsibilities : • Coordinate the execution of security and GRC initiatives (e.g., risk ... assessments, compliance efforts, security tool implementations, policy updates). • Develop and ...
Responsibilities : • Coordinate the execution of security and GRC initiatives (e.g., risk ... assessments, compliance efforts, security tool implementations, policy updates). • Develop and ...
Risk Analyst - Entry Level
Memphis, TN · Remote
$25 - $40/hr
... management, GRC modules, or ITSM workflows) • CRISC certification preferred or active pursuit of it demonstrates the right commitment to risk-focused work • Strong written and verbal ...
Risk Analyst - Entry Level
Memphis, TN · Remote
$25 - $40/hr
... management, GRC modules, or ITSM workflows) • CRISC certification preferred or active pursuit of it demonstrates the right commitment to risk-focused work • Strong written and verbal ...
Risk Innovation and Transformation Manager
Nashville, TN · Remote
$87.20K - $179.50K/yr
This role focuses on leveraging ServiceNow GRC and artificial intelligence to enhance risk visibility and efficiency. The position operates within a complex, cross-functional environment and drives ...
Risk Innovation and Transformation Manager
Nashville, TN · Remote
$87.20K - $179.50K/yr
This role focuses on leveraging ServiceNow GRC and artificial intelligence to enhance risk visibility and efficiency. The position operates within a complex, cross-functional environment and drives ...
Risk Innovation and Transformation Manager
Knoxville, TN · Remote
$87.20K - $179.50K/yr
This role focuses on leveraging ServiceNow GRC and artificial intelligence to enhance risk visibility and efficiency. The position operates within a complex, cross-functional environment and drives ...
Risk Innovation and Transformation Manager
Knoxville, TN · Remote
$87.20K - $179.50K/yr
This role focuses on leveraging ServiceNow GRC and artificial intelligence to enhance risk visibility and efficiency. The position operates within a complex, cross-functional environment and drives ...
WHAT WE DO Our Security, Risk and Compliance consultants work with clients at all levels of the ... Familiarity or direct experience with GRC/Cybersecurity solutions, tools and technologies * Control ...
WHAT WE DO Our Security, Risk and Compliance consultants work with clients at all levels of the ... Familiarity or direct experience with GRC/Cybersecurity solutions, tools and technologies * Control ...
Configure and support SAP Governance, Risk, and Compliance Access Control capabilities, including ... SAP Security and GRC Access & Process Control Consultant / Security Engineer II Our Deloitte Cyber ...
Configure and support SAP Governance, Risk, and Compliance Access Control capabilities, including ... SAP Security and GRC Access & Process Control Consultant / Security Engineer II Our Deloitte Cyber ...
This position is also responsible for collaborating with Information Security on the development, configuration, and implementation of the Risk Management Archer GRC application. This position ...
This position is also responsible for collaborating with Information Security on the development, configuration, and implementation of the Risk Management Archer GRC application. This position ...
This position is also responsible for collaborating with Information Security on the development, configuration, and implementation of the Risk Management Archer GRC application. This position ...
This position is also responsible for collaborating with Information Security on the development, configuration, and implementation of the Risk Management Archer GRC application. This position ...
This position is also responsible for collaborating with Information Security on the development, configuration, and implementation of the Risk Management Archer GRC application. This position ...
This position is also responsible for collaborating with Information Security on the development, configuration, and implementation of the Risk Management Archer GRC application. This position ...
Experience supporting GRC workflows and evidence needs (risk reporting, audit data requests, controls monitoring/testing, compliance metrics, or GRC tooling integrations). Practical experience ...
Experience supporting GRC workflows and evidence needs (risk reporting, audit data requests, controls monitoring/testing, compliance metrics, or GRC tooling integrations). Practical experience ...
This position is also responsible for collaborating with Information Security on the development, configuration, and implementation of the Risk Management Archer GRC application. This position ...
This position is also responsible for collaborating with Information Security on the development, configuration, and implementation of the Risk Management Archer GRC application. This position ...
Experience supporting GRC workflows and evidence needs (risk reporting, audit data requests, controls monitoring/testing, compliance metrics, or GRC tooling integrations). Practical experience ...
Experience supporting GRC workflows and evidence needs (risk reporting, audit data requests, controls monitoring/testing, compliance metrics, or GRC tooling integrations). Practical experience ...
Experience supporting GRC workflows and evidence needs (risk reporting, audit data requests, controls monitoring/testing, compliance metrics, or GRC tooling integrations). Practical experience ...
Experience supporting GRC workflows and evidence needs (risk reporting, audit data requests, controls monitoring/testing, compliance metrics, or GRC tooling integrations). Practical experience ...
Security Analyst, GRC
Nashville, TN · On-site
Perform periodic fraud risk assessments to identify, evaluate, and document potential fraud risks ... Prior experience with cyber security, privacy, governance, risk & compliance (GRC), internal audit ...
Security Analyst, GRC
Nashville, TN · On-site
Perform periodic fraud risk assessments to identify, evaluate, and document potential fraud risks ... Prior experience with cyber security, privacy, governance, risk & compliance (GRC), internal audit ...
Perform periodic fraud risk assessments to identify, evaluate, and document potential fraud risks ... Prior experience with cyber security, privacy, governance, risk & compliance (GRC), internal audit ...
Perform periodic fraud risk assessments to identify, evaluate, and document potential fraud risks ... Prior experience with cyber security, privacy, governance, risk & compliance (GRC), internal audit ...
Grc Risk information
What is the difference between Grc Risk vs Grc Analyst?
| Aspect | Grc Risk | Grc Analyst |
|---|---|---|
| Certifications | ISO 31000, CRISC, COSO | CISA, CRISC, CISSP |
| Work Environment | Risk management teams, compliance departments | IT, audit, compliance teams |
| Industry Usage | Financial, healthcare, corporate sectors | IT, finance, consulting firms |
| Primary Focus | Identifying and managing enterprise risks | Analyzing controls, assessing risks in systems |
Grc Risk professionals focus on enterprise-wide risk management strategies, while Grc Analysts typically analyze specific controls and systems to identify vulnerabilities. Both roles require similar certifications and often work within the same industries, but Grc Risk has a broader scope in risk oversight, whereas Grc Analysts concentrate on detailed control assessments.
What are popular job titles related to Grc Risk jobs in Tennessee? For Grc Risk jobs in Tennessee, the most frequently searched job titles are:
What job categories do people searching Grc Risk jobs in Tennessee look for? The top searched job categories for Grc Risk jobs in Tennessee are:
Senior Governance Risk and Compliance (GRC) Analyst and Team Lead
C2 Labs, IncKnoxville, TN • On-site, Remote
Full-time
Posted 20 days ago
Job description
C2 Labs [www.c2labs.com] partners with clients on their IT transformation journey via data-driven IT strategic planning, application rationalization and redevelopment, and innovative research and development of new industry standards and technologies. C2 Labs provides specialized products and services that allow our clients to innovate with speed and scale seamlessly while maintaining a robust and effective security posture. C2 has a unique approach to client success enablement that is empowered by ART (Application Rationalization and Transformation) and SCIENCE (Strategic Client Interview and Engineering to assess, design, and implement Cloud Ecosystems) to couple creative new approaches/technologies with proven methodologies that deliver rapid results.
Must be a US Citizen and capable of passing a Public Trust background investigation.
Job Summary:
As a Senior Governance Risk and Compliance (GRC) Analyst and Team Lead at C2 Labs you will lead a team of security analysts and engineers to implement regulatory frameworks such as the Federal Information Security Modernization Act (FISMA), the Federal Risk Authorization Management Program (FedRAMP) and the State Risk Authorization Management Program (StateRAMP). You will leverage GRC tools to develop security authorization package documentation such as the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), and the Plan of Actions & Milestones (POA&M) in human readable and machine-readable formats. You will serve as a Subject Matter Expert (SME) at key stakeholder meetings and will develop and maintain client relationships. You will draft security control implementation statements with enough detail to facilitate the testing of the controls and will develop supporting documentation including the Contingency Plan (CP), Incident Response Plan (IRP), and Configuration Management Plan (CMP). As a Senior GRC Analyst your primary responsibility will be to ensure the timely development of the security authorization package in accordance with C2 Labs quality standards. You will be expected to lead multiple teams and will work on up to 2 packages at a time.
Job Responsibilities:
Categorize systems in accordance with Federal Information Processing Standards (FIPS) 199 and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-60. Select and tailor security controls by applying scoping guidance in accordance with NIST SP 800-53 and FedRAMP specific guidance. Document the implementation characteristics for security controls with enough detail to permit the testing of the security control by an independent assessor/Third Party Assessment Organization (3PAO).
Qualifications:
Working knowledge of:
Must be a US Citizen and capable of passing a Public Trust background investigation.
Job Summary:
As a Senior Governance Risk and Compliance (GRC) Analyst and Team Lead at C2 Labs you will lead a team of security analysts and engineers to implement regulatory frameworks such as the Federal Information Security Modernization Act (FISMA), the Federal Risk Authorization Management Program (FedRAMP) and the State Risk Authorization Management Program (StateRAMP). You will leverage GRC tools to develop security authorization package documentation such as the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), and the Plan of Actions & Milestones (POA&M) in human readable and machine-readable formats. You will serve as a Subject Matter Expert (SME) at key stakeholder meetings and will develop and maintain client relationships. You will draft security control implementation statements with enough detail to facilitate the testing of the controls and will develop supporting documentation including the Contingency Plan (CP), Incident Response Plan (IRP), and Configuration Management Plan (CMP). As a Senior GRC Analyst your primary responsibility will be to ensure the timely development of the security authorization package in accordance with C2 Labs quality standards. You will be expected to lead multiple teams and will work on up to 2 packages at a time.
Job Responsibilities:
Categorize systems in accordance with Federal Information Processing Standards (FIPS) 199 and National Institute of Standards and Technology (NIST) Special Publication (SP) 800-60. Select and tailor security controls by applying scoping guidance in accordance with NIST SP 800-53 and FedRAMP specific guidance. Document the implementation characteristics for security controls with enough detail to permit the testing of the security control by an independent assessor/Third Party Assessment Organization (3PAO).
- Develop, review, and update security authorization package documentation to include the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), and Plan of Actions and Milestones (POA&M).
- Develop, review, and update supporting documentation including the Contingency Plan (CP), Incident Response Plan (IRP), and Configuration Management Plan (CMP).
- Conduct Security Impact Assessments (SIAs) on changes to information systems.
- Create the Control Implementation Summary (CIS)/Customer Responsibility Matrix (CRM) workbook outline Cloud Service Provider (CSP) and customer responsibilities.
- Develop, review, and update policies and procedures to support the implementation of the NIST 800-53 control families.
- Leverage the next generation of Governance Risk and Compliance (GRC) tools to automate the creation of the SSP.
- Review current security assessment and authorization processes and provide recommendations for improvement.
- Develop Risk Assessment Reports (RAR).
- Provide guidance on NIST 800-53, FedRAMP, and StateRAMP control requirements.
- Develop and deliver training to educate stakeholders on the various tasks and activities associated with the RMF.
Qualifications:
- Minimum 8 years' experience in IT consulting specializing in Governance, Risk, and Compliance using the RMF.
- CISSP, CISM, or CAP certification, or equivalent preferred
- Excellent communication and interpersonal skills, with the ability to build a rapport and trust with clients.
- Knowledge of the cybersecurity industry to include regulatory frameworks such as the National Institute of Standards in Technology (NIST) Risk Management Framework (RMF), Federal Risk Authorization Management Program (FedRAMP), Department of Defense (DoD) Impact Levels (2-6), and the State Risk Authorization Management Program (StateRAMP).
- Possesses an in-depth understanding of the FedRAMP authorization process and associated templates and deliverables.
- Must have extensive experience creating security authorization package documentation (i.e., SSP, SAP. SAR, & POA&M) and managing system authorization artifacts for a FedRAMP authorized cloud environment.
Working knowledge of:
- NIST SP 800-53 Security and Privacy Controls for Federal Information Systems and Organizations
- FedRAMP Security Controls Baselines (i.e., Low, Moderate, High, and Li-SaaS)
- StateRAMP Security Control Baselines (i.e., Low Impact Ready, Low Impact Authorized, Moderate Impact Ready, Moderate Impact Authorized)
- NIST SP 800-37 Guide for Applying the Risk Management Framework to Federal Information Systems
- Must have strong technical writing skills.
- Must be able to work independently under only general direction.
- Must be able to interpret and provide consulting expertise on FedRAMP security requirements.
- Will serve as an RMF Subject Matter Expert (SME) at key stakeholder meetings.
- Must have extensive knowledge in reviewing, analyzing, and documenting the secure implementation of logical controls, physical controls, environmental controls, personnel security, and incident handling.
- Experience preparing monthly continuous monitoring deliverables (e.g., vulnerability scans, POA&Ms, and asset inventory) for submission to the FedRAMP PMO.
- Must be a US Citizen and capable of passing a Public Trust background investigation.