GRC Automation Engineer

Accountabilities:
The GRC Automation Engineer is responsible for designing, implementing, and maintaining automation solutions that improve cybersecurity governance processes, enhance compliance operations, and support efficient risk management activities. This role collaborates with cybersecurity and technology teams to identify opportunities for automation, integrate enterprise tools, and deliver scalable solutions that improve operational effectiveness. Design, develop, and maintain automated workflows supporting Risk Management Framework (RMF), Assessment and Authorization (A&A), continuous monitoring, and governance activities. Build integrations between GRC platforms, vulnerability management systems, security tools, ticketing platforms, and reporting solutions. Automate evidence collection, control validation, compliance reporting, and recurring governance activities to improve accuracy and efficiency. Support implementation and optimization of enterprise governance, risk, and compliance platforms such as JCAM, ServiceNow, or similar solutions. Develop scripts, APIs, dashboards, and workflow automations to improve visibility into authorization status, POA&M activities, vulnerability remediation, and cybersecurity performance. Partner with RMF analysts, ISSOs, security engineers, and leadership teams to identify manual processes that can be streamlined through automation. Create executive dashboards, cybersecurity metrics, and operational reports through automated data aggregation and visualization. Evaluate emerging technologies, including artificial intelligence and machine learning capabilities, to improve cybersecurity workflows, documentation, and reporting. Maintain technical documentation, workflow diagrams, integration standards, and automation procedures. Monitor automation performance, troubleshoot issues, and implement enhancements to improve reliability and scalability. Support continuous improvement initiatives by simplifying cybersecurity governance processes while maintaining compliance with federal security requirements. Requirements: The ideal candidate has experience developing automation solutions within cybersecurity, governance, compliance, or enterprise IT environments. They combine technical development skills with knowledge of security frameworks and enjoy creating efficient, scalable solutions that improve operational processes. Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Software Engineering, Information Technology, or a related technical discipline. 3+ years of experience developing automation solutions supporting cybersecurity, governance, compliance, or enterprise IT operations. Experience developing scripts, APIs, or workflow automation using technologies such as PowerShell, Python, JavaScript, or similar programming languages. Experience integrating enterprise platforms through REST APIs, web services, or workflow orchestration tools. Working knowledge of NIST Risk Management Framework (RMF), FISMA, and cybersecurity governance processes. Experience developing dashboards, reports, and operational data visualizations. Strong analytical, troubleshooting, problem-solving, and technical documentation skills. Experience with governance platforms such as JCAM, eMASS, ServiceNow GRC, Archer, Microsoft Power Platform, or similar technologies is preferred. Experience integrating vulnerability management platforms, SIEM solutions, cloud security tools, and enterprise ticketing systems is a plus. Familiarity with AI-assisted workflow automation, document generation, or cybersecurity reporting is preferred. Experience supporting continuous monitoring, Continuous Diagnostics and Mitigation (CDM), or enterprise cybersecurity operations is beneficial. Experience working in Agile development environments is preferred. Relevant certifications such as Security+, CGRC, CISSP, Microsoft Power Platform certifications, AWS Developer Associate, Azure Developer Associate, or Certified Scrum Developer are valued. Ability to work collaboratively, manage priorities effectively, and communicate technical concepts clearly. Benefits: Competitive salary paid twice monthly. Comprehensive medical coverage with 100% of medical premiums covered. Company-wide new business incentive programs. Contribution incentives for activities such as white papers, blog posts, and internal webinars. Three weeks of paid time off starting annually. Eleven paid holidays per year. 401(k) program with 100% company match on the first 4%. Monthly reimbursement for cell phone and home internet expenses. Paid parental leave. Investment in training, certifications, and professional development opportunities. Opportunities to expand technical expertise while working on impactful cybersecurity initiatives.

How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
 Why Apply Through Jobgether? 
 
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
 
 
#LI-CL1