Jobs in the United States

25+ jobs

Save this search

Added 6 hours ago
SF
Information Systems Security Engineer
Second Front Systems
Remote, United States
- $200,000 to $210,000 USD / year
…solutions and translate engineering decisions into RMF artifacts, control narratives, and authorization evidence, ensuring that solutions are defensible under DoD RMF and hold up to…
Added 9 hours ago
Security Control Assessor, Jr
AGE Solutions
Fort Meade, MD · Alexandria, VA · Chambersburg, PA
AGE Solutions is looking for a Security Control Assessor, Junior to join our team in support of a cybersecurity risk management and assessment program with our DoD customer.
Added 10 hours ago
SF
Information Systems Security Officer (ISSO)
Second Front Systems
Remote, United States
- $150,000 to $170,000 USD / year
…system authorizations across DoD ATO programs, and ensuring security posture withstands assessor and Authorizing Official…
Added 1 day ago
GRC Lead
Nominal
NY · WA
…view of where each framework stands, run the gap analysis and control uplift planning, and decide what gets fixed, in what order, and by whom. You'll also own the evidence tracker, drive…
Added 1 day ago
VS
Security Control Assessor (SCA)
VT Services
Aurora, CO
- $140,000 to $210,000 USD / year
VTG is looking for multiple levels (Level 2, 3 & 4) of a Security Control Assessor (SCA) in multiple locations. (Note: position is contingent upon program award and the postions are located…
Added 2 days ago
Information Systems Security Officer
GovCIO
Richmond, VA
Review and analyze vulnerability results using Tenable Security Center; create, track, and manage POA&M remediation activities through closure; validate scan completeness before Security…
Added 3 days ago
Information System Security Officer (ISSO)
CACI International
Jessup, MD
Review authorization packages for completeness, including Control Correlation Identifiers (CCIs), Security Control Assessor–Validator (SCA-V) results, STIGs, POA&Ms, and cybersecurity…
Added 4 days ago
Security Control Assessor (SCA) II
GD Information Technology, Inc.
United States
Information Security, Information Security Management, Information System SecurityCertifications:
Added 4 days ago
TH
Cloud Security Architect - IL4 / Enterprise Integration
TOMORROW HIRE
Washington, DC · Denver, CO · Colorado Springs, CO · Melbourne, FL
- $150,000 to $200,000 USD / year
Hands-on experience with RMF and Authority to Operate (ATO) processes, including control implementation, documentation in eMASS, and assessor support.
Added 5 days ago
Security Control Assessor
Leidos
Alexandria, VA
Leidos is seeking multiple Security Control Assessors to support our assessment team. These positions can be based out of any of our three locations - Alexandria, VA, Fort Meade, MD, or…
Added 5 days ago
Joint Operations Center Space Attack Assessor (SAA) Training Support SME
Trinzic
Colorado Springs, CO
…and advancing some of the world's highest-priority national security and space…
Added 6 days ago
K
Cybersecurity Engineer
Kentro
Springfield, VA
- $145,000 to $180,000 USD / year
Provide security engineering advice and guidance to the ISSO, ISSE, Security Control Assessor (SCA), and OCIO in support of the NGA Program Manager(s).
Added 6 days ago
IT CASP+ Practitioner-Sr /IT Certified Professional
TMPC
Aberdeen Proving Ground, MD
Assisted in ATO package development, Security Control Assessor support, and vulnerability management.
Added 6 days ago
SECRET Clearance- Senior Cybersecurity / RMF Engineer (CISSP)
TMPC
Aberdeen Proving Ground, MD
Supported Security Control Assessor engagements and authorization activities resulting in successful ATO decisions and sustainment.
Added 6 days ago
CO
GIS Specialist II
County of Riverside
Riverside, CA
- $32.75 to $44.97 USD / hour
The County of Riverside's Assessor - County Clerk - Recorder (ACR), Assessor Mapping Division seeks a GIS Specialist II who will be assigned to their location in Riverside.The incumbent for…
Added 6 days ago
Information System Security Officer (ISSO)
CACI, INC.-FEDERAL
Annapolis Junction, MD
Review authorization packages for completeness, including Control Correlation Identifiers (CCIs), Security Control Assessor–Validator (SCA-V) results, STIGs, POA&Ms, and cybersecurity…
Added 6 days ago
Information System Security Officer (ISSO)
CACI
Annapolis Junction, MD · MD · Jessup
Review authorization packages for completeness, including Control Correlation Identifiers (CCIs), Security Control Assessor–Validator (SCA-V) results, STIGs, POA&Ms, and cybersecurity…
Added 6 days ago
T
Information Systems Security Officer - TS/SCI REQUIRED
TEKsystems
Herndon, VA
- $70 to $127 USD / hour
DescriptionInformation Systems Security Officer (ISSO) (1 Position)TEKsystems is seeking an Information Systems Security Officer (ISSO) to support the authorization and ongoing security of…
Added 6 days ago
Joint Operations Center Space Attack Assessor (SAA) Training Support SME
KBR Wyle Services, LLC
Colorado Springs, CO
…and advancing some of the world's highest-priority national security and space…
Added 7 days ago
JL
Cybersecurity Analyst III - CSET Lead
JT4, LLC
Edwards AFB, CA
- $120,000 to $150,000 USD / year
Interface with the Authorizing Official (AO) and the Security Control Assessor (SCA) for coordination of Authorization to Operate (ATO) packages
Added 7 days ago
JL
Cybersecurity Analyst I
JT4, LLC
Edwards AFB, CA
- $86,000 to $105,000 USD / year
…existing risk mitigation techniques implemented so that the Security Control Assessor, Authorizing Official, and other members of cybersecurity leadership can make informed cybersecurity…
Added 7 days ago
JL
Cybersecurity Analyst III - CSET Supervisor
JT4, LLC
Edwards AFB, CA
- $120,000 to $150,000 USD / year
Interface with the Authorizing Official (AO) and the Security Control Assessor (SCA) for coordination of Authorization to Operate (ATO) packages
Added 7 days ago
JL
Cybersecurity Analyst II
JT4, LLC
Edwards AFB, CA
- $97,000 to $125,000 USD / year
…existing risk mitigation techniques implemented so that the Security Control Assessor, Authorizing Official, and other members of cybersecurity leadership can make informed cybersecurity…
Added 7 days ago
Security Control Assessor II
GD Information Technology, Inc.
United States
Computer Security, Information Assurance, Information Security, Information Security Management, Information System SecurityCertifications:
Added 10 days ago
Information Systems Security Officer
Resource Management Concepts, Inc.
Charleston, SC
Ability to meet applicable cybersecurity workforce requirements, including Full Security Control Assessor qualification if required.

Nominal

GRC Lead

NY, United States
WA, United States

Apply About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Nov 8, 2026

Original job description

About Nominal Engineers today are building some of the most ambitious machines humanity has ever seen. They should have AI that’s purpose-built for them. Nominal is building the Hardware Intelligence Platform that gives engineers increased visibility into complex physical systems, helps them make better decisions, and ultimately gets their products into the real world faster. It brings together the systems, data, intelligence, and applications hardware engineering requires to meet the AI moment. Hardware engineering teams use Nominal to simulate, test, manufacture, and operate the physical systems that keep the world moving, from spacecraft and autonomous vehicles to next-generation energy systems and robotics. Our customers span aerospace, defense, manufacturing, transportation, energy, and robotics. They include Anduril, Shield AI, Wisk Aero, Pratt Miller Motorsports, Antares, and Shinkei Systems, amongst others, alongside programs within the U.S. Air Force and Navy. Our team draws from SpaceX, Palantir, Anduril, Applied Intuition, Tesla, and other leading companies, united by a common mission: giving hardware engineers the tools to build the future with speed, safety, and confidence. We're a fast-moving team that owns problems end-to-end, works across disciplines, and thrives at the intersection of hardware and software. Some of the world’s leading technology investors, including Sequoia, Lightspeed, Founders Fund, General Catalyst, Lux Capital, and Insight Partners, are backing Nominal’s ambition to change how machines are built and operated. We’re looking for teammates who want to take on hard problems and help make a new generation of world-changing hardware possible. 🧭 About the role Our customers, including programs within the U.S. Air Force and Navy, trust us with the data and controls behind their hardware, so our compliance posture has to hold up under outside scrutiny. Nominal's programs span FedRAMP, SOC 2, CMMC, and Cyber Essentials Plus (CE+), each with its own controls, evidence, and assessors. GRC is the function that keeps all of them moving and gets them across the line. We're looking for a GRC Lead to own execution across every program. You'll hold a single view of where each framework stands, run the gap analysis and control uplift planning, and decide what gets fixed, in what order, and by whom. You'll also own the evidence tracker, drive task owners to closure, coordinate audit readiness and assessor logistics, and report compliance status to leadership. You are the execution owner, not a coordinator. Because the role takes program-management load off every technical lane, you'll have visible escalation authority from day one. This is a high-ownership role for a GRC practitioner who has taken programs through real audits and knows that they pass when someone owns closure on every control, not when the tracker looks tidy. You'll shape which compliance problems we solve first and set the standard for how Nominal runs them. 🚀 What you'll do Own a single view across FedRAMP, SOC 2, CMMC, and CE+, so leadership and every technical team know where each program stands and what is blocking it. Run gap analysis and control uplift planning across frameworks, finding where one control satisfies several programs and where a new one is needed. Sequence remediation across engineering, IT, and security, deciding what gets fixed when and by whom, and escalate when owners miss commitments. Own the evidence tracker and drive task owners to closure ahead of every audit window. Coordinate audit readiness and assessor logistics for each program, from scoping and walkthroughs through findings response. Report compliance status to leadership with clear risks, owners, and dates. Define how the programs run day to day, so task owners know what is expected and no program depends on one person. 🔍 We're looking for someone with Hands-on experience running compliance programs through audits, such as FedRAMP, SOC 2, CMMC, or CE+. Working knowledge of control frameworks and how they map to each other, such as NIST 800-53, NIST 800-171, and the SOC 2 trust services criteria. Experience turning gap analysis into a sequenced remediation plan with named owners and dates. A track record of owning evidence collection and audit readiness, including working directly with assessors. Enough technical fluency to talk with engineering, IT, and security teams about what a control means in practice and whether the evidence satisfies it. Clear written and verbal communication when reporting status and risk to senior leaders. The judgment to make calls amid competing priorities and to use escalation authority directly and calmly when owners miss commitments. ⚡ Skills that supercharge us Experience building a GRC function at a growth-stage software company, from first tracker to repeatable process. Hands-on use of compliance automation or GRC tooling, such as Drata, Vanta, or similar platforms. Familiarity with handling CUI and export-controlled data across cloud, on-prem, and air-gapped environments. Background at a defense contractor or a software company selling to federal customers. ✨ Benefits/Perks 🏥 100% coverage of medical, dental, and vision insurance 🏖️ Unlimited PTO and sick leave 🍽️ Free lunch, snacks, and coffee 🚀 Professional Development Stipend 🛠️ In-office hardware lab with a $250 project stipend ✈️ Annual company retreat 👶 12 weeks parental leave 🌱 Fertility and family planning ($15,000 lifetime) 💪 Wellness stipend ($100/month) 🛠️ $500/year hardware sensor stipend 💼 401(k) 📈 Employee-friendly equity terms 🏢 In-office 5 days per week All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. ITAR Requirements To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here .

Apply About employer

More about this job

Skills

Regulatory compliance
Logistics
Program management
Leadership
Communication skills
Reporting

Report this job