GRC Analyst – Public Sector

Socure Inc.

Job Overview

Location

Remote - US

Job Type

Full-time

Full Job Description

📋 Description

• The GRC Analyst – Public Sector role at Socure is critical to maintaining and advancing the company’s compliance posture for its government-facing identity verification services, ensuring adherence to FedRAMP, GovRAMP, and NIST standards to enable secure, scalable operations in the public sector.
• Day-to-day responsibilities include coordinating 3PAO assessments, maintaining FedRAMP/GovRAMP documentation, leading continuous monitoring and vulnerability remediation, designing automated access validation and evidence collection systems, delivering compliance training, and supporting public sector sales with accurate security narratives and RFP responses.
• The role sits within Socure’s GRC team, collaborating closely with Security, Engineering, IT, DevOps, Product, Legal, and sales teams to operationalize compliance through automation, AI-enabled workflows, and structured data formats like OSCAL, transforming traditional GRC into a scalable, system-driven function.
• The analyst will deepen expertise in federal compliance frameworks, lead automation-first compliance initiatives, influence GRC strategy for a high-growth public sector business, and develop skills in translating technical controls into customer-ready communications and audit-ready evidence.

🎯 Requirements

• 5+ years of cybersecurity or identity management experience, including at least 1 year in the public sector
• Direct experience with FedRAMP, GovRAMP, and NIST frameworks (800-53, 800-63, 800-171)
• Proven ability to manage continuous monitoring, vulnerability remediation, and compliance reporting
• Experience using AI tools (e.g., ChatGPT, Glean, Gemini) and machine-readable formats (e.g., OSCAL) to automate compliance processes
• Strong communication, organization, and collaboration skills with ability to manage multiple priorities
• Ability to adapt to changing requirements and support responses to security questionnaires, RFPs, or public sector RFx processes
• Must be a U.S. Person (citizen or permanent resident) residing in the U.S. and eligible for OPM NACI clearance

🏖️ Benefits

• Opportunity to shape GRC strategy and build automation-first, system-driven compliance solutions for a fast-growing public sector business
• Collaboration across Security, Engineering, IT, DevOps, Product, Legal, and sales teams to drive innovation in continuous compliance
• Exposure to cutting-edge tools like Wiz, Burp Suite, AWS native services, and AI-assisted compliance workflows
• Role includes public sector engagement — translating controls into customer-facing narratives, RFP responses, and security communications
• Work on mission-critical identity trust infrastructure that protects businesses, governments, and millions of users daily
• Equal opportunity employer committed to diversity and inclusion, with accommodations available upon request

Skills & Technologies

AWS

Remote

Ready to Apply?

Apply Externally

You will be redirected to an external site to apply.

Socure Inc.

Visit Website

About Socure Inc.

Socure Inc. provides digital identity verification and fraud prevention software for financial services, fintech, e-commerce and government clients. The platform applies machine learning and graph-based analytics to link and validate identity elements in real time, detecting synthetic identities, account takeover and document fraud. It integrates via APIs and SDKs for onboarding, KYC/AML compliance and transaction monitoring, aiming to reduce false positives and manual reviews while improving approval rates for legitimate users worldwide.

View Company Profile

Get more remote jobs like this

Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.

Weekly remote jobs and featured talent.

No spam. Only curated remote roles and product updates. You can unsubscribe anytime.