GRC Security Architect

• Lead end-to-end SSP/SSPP development and maintenance
• Manage POA&M remediation and compliance gap closure
• Translate pen test and vulnerability findings into actionable remediation plans
• Ensure audit readiness with complete, assessor-ready documentation
• Oversee risk-based vulnerability management across cloud and hybrid environments
• Provide governance oversight for endpoint, web, and cloud security controls

Required Experience

• 12+ years in GRC, enterprise security architecture, vulnerability management, and cloud security
• 10+ years owning SSP development end-to-end
• Experience with CMS MARS-E v2.2 or similar federal/state frameworks
• Strong expertise in audit evidence collection, control documentation, and POA&M management
• Deep knowledge of NIST SP 800-53 and NIST Risk Management Framework
• Experience with Secure SDLC and DevSecOps practices
• Strong executive communication and stakeholder management skills

Preferred