Socure
GRC Analyst - Public Sector
Hub - Washington DC · Mid
Sponsorship not specified$53k-$800kDetected 41 days ago
AWSDevOpsData EngineeringCybersecurityIncident ResponseComplianceProcess ImprovementCommunicationCollaborationBurp SuiteCISSP
Stay score
odds of building a lasting career here
59Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role80
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
3 transfer filings in the last year, covering 3 workers. Median labor-condition decision: 10 days. An employer that already files transfers is one that can take over an existing H-1B.
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Day-to-day coordination and execution of externalThird Party Assessment Organization (3PAO) assessments and responding to auditor requests for evidence and documentation.
- Replace manual evidence collection with system-generated, API-driven, or continuously validated evidence where possible.
- Coordinate recurring continuous monitoring compliance activities such as access reviews, incident response exercises, and contingency plan testing.
Responsibilities
- Prepare certification and authorization packages and maintain related documentation such as the System Security Plan (SSP) and associated appendices.
- Build and maintain the trackers, procedures, and status-reporting artifacts that operationalize this work, structured so other stakeholders can use them directly.
- Design and evolve an automation-first continuous monitoring program leveraging system integrations, telemetry, and real-time data pipelines
- Lead the day-to-day FedRAMP continuous monitoring process including vulnerability management lifecycle, from identification through remediation and verification, coordinating with Security, Engineering, and DevOps teams to address issues identified with tools such as Wiz, Burp Suite, AWS native services, and other platforms and resolve issues within FedRAMP and GovRAMP timelines.
- Design scalable and automated access validation mechanisms integrated with identity and infrastructure systems
- Design, implement and deliver FedRAMP training programs to promote compliance awareness
- Create and manage automated workflows to improve efficiency.
- Collaborate with the Director of GRC to design automation-first and AI-enabled workflows that reduce manual effort and enable scalable compliance operations
- Support the development, rollout, and maintenance of machine-readable compliance documentation (e.g., OSCAL or comparable structured formats) to facilitate interoperability
- Socure is building the identity trust infrastructure for the digital economy - verifying 100% of good identities in real time and stopping fraud before it starts.
Requirements
- Direct experience with FedRAMP, GovRAMP, and NIST frameworks (800-53, 800-63, 800-171).
- Proven ability to personally execute continuous monitoring, vulnerability remediation, and compliance reporting.
- Ability to adapt to changing requirements
- prior RFP-specific experience is not required.
- Must be a U.S. Person (U.S. Citizens or U.S. Permanent Residents) residing in the United States and be able to obtain a U.S. OPM NACI clearance.
Nice to have
- Professional certifications preferred (CISSP, CISM, CISA, IAPP).
- Proven hands-on contribution to certification and compliance initiatives (FedRAMP, GovRAMP, NIST 800-63/171).
- Skilled in continuous monitoring, vulnerability management, policy updates, and audit coordination across cross-functional teams.
- Also valued: a demonstrated track record of identifying and closing process gaps proactively, without waiting for direction.
- Strong understanding of evolving cybersecurity standards and digital identity regulations, with the ability to translate them into practical risk and compliance improvements.
- Socure is an equal opportunity employer that values diversity in all its forms within our company.
- YouTube https://www.youtube.com/c/Socure | LinkedIn https://www.linkedin.com/company/socure/ | X (Twitter) https://x.com/socureme | Facebook https://www.facebook.com/socure/
- Public sector experience is a plus but not required.
Compensation
- $53k-$800k
Company info
- Contract security requirements from new customers
Visa & Work Authorization
- Must be a U.S. Person (U
This listing is sourced directly from Socure's careers page and normalized into a canonical job model.