Cloud Security GRC Consultant
Darkwolfsolutions · Herndon, VA
About this role
**Cloud Security GRC Consultant** **About the Role** Dark Wolf’s Google Cloud Security Governance, Risk, and Compliance (GRC) Consultants apply federal security frameworks—such as the **NIST Risk Management Framework (RMF)** and **FedRAMP**—to modern, complex **Google Cloud** environments. You’ll help move beyond checklist compliance by bridging **engineering and security**, supporting the **Assessment & Authorization (A&A)** lifecycle, and translating cloud architecture into **verifiable evidence** to achieve an **Authorization to Operate (ATO)**. **Responsibilities** - Collaborate in a fast-paced **Agile** team environment - Stay current on the latest **Google Cloud** services and technologies - Implement security best practices for Google Cloud solutions - Support federal compliance requirements, including **FedRAMP**, **NIST SP 800-53**, and agency-specific security overlays - Develop innovative approaches to meet government and commercial cybersecurity frameworks - Perform technical security control assessments across GCP components/configurations to identify gaps, risks, and mitigations - Contribute to the development and finalization of authorization artifacts - Partner with cloud architecture and engineering teams to provide actionable compliance guidance (security built in from design through deployment) - Use Google Cloud native tools for **continuous monitoring (ConMon)**, vulnerability management, and security posture management - Support reviews with the **Authorizing Official (AO)**, **3PAOs**, and federal agency security teams - Develop clear **Plan of Action and Milestones (POA&M)** entries communicating risks, impact, and mitigation strategies - Support strategic consulting on evolving federal cloud security policy and best practices **Qualifications** - **2+ years** of relevant experience - At least **one Google Cloud Professional Certification** - Experience supporting **RMF** processes (e.g., ISSO, Security Controls Validator, or information assurance engineering) - Hands-on experience with **eGRC tools** such as **eMASS** and **XACTA** - Ability to communicate complex security concepts to technical and non-technical stakeholders - Strong problem-solving skills and ability to quickly learn and apply new technologies - Familiarity with cloud automation, **Infrastructure as Code** (e.g., **Terraform**), or scripting to automate compliance tasks - Understanding of Google Cloud services and technologies - **B.A. or B.S.** in Information Security, Computer Science, or related discipline - **US Citizenship** and clearable up to a **Secret Security Clearance** **Preferred Qualifications** - Experience working within **Agile** teams - Experience with Google Cloud compliance products such as **Security Command Center** and **Assured Workloads** - Hands-on experience with compliance automation, **OSCAL**, **Python**, or **Infrastructure as Code** (e.g., Terraform) - Experience working with customers in the **U.S. Public Sector** - U.S. Federal Government security clearance - Experience with **DoD/DISA** cybersecurity policies **Location & Employment Details** - **Hybrid** role based out of **Herndon, VA** - Estimated salary range: **$100,000.00 – $140,000.00** (commensurate with experience and skills) - Direct, full-time **W2** employees only (no third-party staffing agencies, C2C, or 1099 contractors) **EEO Statement** EEO/AA employer (Minorities/Women/Veterans/Disabled and other protected categories).
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.