Governance, Risk & Compliance Engineer

The ideal candidate will have hands-on experience supporting government Authorization to Operate (ATO) processes and be comfortable leveraging modern AI tools to improve security, compliance, documentation, and risk-management workflows. Direct hands-on experience performing or supporting government ATOs — candidates should have completed or substantially participated in at least one or two government ATO processes.

DPP is seeking a Governance, Risk & Compliance Engineer for an opportunity with our client in the cybersecurity industry.
 
Work Location: Fully remote
Work Authorization: US Citizen; must be able to obtain/maintain a U.S. security clearance
 
Position Summary:

• We are seeking a GRC Engineer to support the development, implementation, and maintenance of security governance, risk management, and compliance programs.
• The ideal candidate will have hands-on experience supporting government Authorization to Operate (ATO) processes and be comfortable leveraging modern AI tools to improve security, compliance, documentation, and risk-management workflows.
• This is an excellent opportunity for an early-career cybersecurity professional who has direct government compliance experience and wants to grow within a GRC-focused engineering environment.

Responsibilities:

• Support governance, risk, and compliance activities across information systems and security programs.
• Perform and support Authorization to Operate (ATO) activities within government environments.
• Develop, maintain, and manage security documentation, including System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), risk assessments, and related compliance artifacts.
• Assist with security control implementation, assessment, validation, and continuous monitoring.
• Coordinate with cybersecurity, engineering, IT, and program teams to address security and compliance requirements.
• Identify, document, and track security risks and remediation activities.
• Support audits, assessments, and government compliance reviews.
• Use AI tools and automation technologies to improve GRC processes, documentation, analysis, and workflow efficiency.
• Translate technical security requirements into actionable compliance and risk-management activities.
• Stay current with applicable cybersecurity frameworks, government security requirements, and evolving compliance practices.

Required Qualifications:

• 1–3 years of professional experience in Governance, Risk & Compliance, cybersecurity, information assurance, or a related field.
• Direct hands-on experience performing or supporting government ATOs — candidates should have completed or substantially participated in at least one or two government ATO processes.
• Understanding of cybersecurity governance, risk management, security controls, and compliance processes.
• Experience creating or maintaining security and compliance documentation.
• Strong analytical, organizational, and written communication skills.
• Ability to work independently in a remote environment.
• Experience using AI tools to support cybersecurity, compliance, documentation, research, or workflow automation.

Preferred Qualifications:

• Experience with NIST Risk Management Framework (RMF) and related NIST publications.
• Familiarity with government security frameworks and authorization processes.
• Experience with POA&Ms, SSPs, security control assessments, and continuous monitoring.
• Cybersecurity or GRC-related certifications such as Security+, CySA+, CAP, CISM, or CISSP.
• Experience working with GRC platforms or security compliance management tools.
• Familiarity with AI-assisted cybersecurity and compliance workflows.

Interested? Learn more:
Click the apply button to learn more about this position (#26-01179).
 DP Professionals (DPP) offers a range of compensation and benefits packages to our employees and their eligible dependents. DPP is a certified Woman-owned Small Business Enterprise (WBE and WOSB) with more than 25 years in the staffing industry. EOE/AA/V/D