Governance, Risk, and Compliance Engineer

Responsibilities

• Architect and lead enterprise GRC modernization programs, providing technical leadership across strategy, platform design, and implementation.
• Design scalable GRC platform architectures that support automated control management, continuous monitoring, and enterprise risk aggregation.
• Define and implement automated control evidence ingestion pipelines, integrating data from security, IT, cloud, and operational systems.
• Establish enterprise data integration standards, including data models, interfaces, and normalization rules.
• Translate regulatory and policy requirements into implementable technical designs aligned with frameworks such as NIST SP 800-53, FISMA, and ISO 27001.
• Provide technical direction for risk aggregation and reporting to ensure executive visibility into cumulative risk and remediation priorities.
• Mentor and develop engineers, consultants, and managers while setting technical standards for delivery excellence.
• Support business development activities, including proposal development and solution shaping as a GRC subject matter expert.

Requirements

• Ability to obtain and maintain a Federal or DoD Public Trust clearance.
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field.
• Minimum of 9 years of progressively responsible experience in cybersecurity GRC, compliance engineering, or risk management.
• Active Certified in Governance, Risk and Compliance (CGRC) certification.
• Active Certified Information Systems Security Professional (CISSP) certification.
• Demonstrated experience designing and implementing enterprise GRC platforms and compliance automation solutions.
• Proficiency with leading GRC platforms such as ServiceNow, Qmulos, or Archer.

Preferred Qualifications

• Experience supporting federal civilian, defense, or regulated commercial clients.
• Additional certifications such as CISM, CISA, CCSP, or cloud security credentials.
• Experience integrating GRC platforms with cloud, DevSecOps, SIEM, asset management, and identity systems.
• Prior consulting experience with responsibility for client engagement and team leadership.

Benefits

• Medical, Rx, Dental & Vision Insurance
• 401(k) Retirement Plan and Student Loan PayDown
• Parental Leave and Adoption Assistance
• Tuition Reimbursement and continuous learning opportunities
• Flexible benefits package including HSA and FSA options

About the Company

Guidehouse is a global AI-led professional services firm delivering advisory, technology, and managed services to the commercial and government sectors. We drive efficiency and resilience in the healthcare, financial services, energy, infrastructure, and national security markets.