Support and contribute to Strider’s GRC program with emphasis on CMMC, FedRAMP, and IL-5 compliance.
Assist with readiness, assessment, and continuous monitoring activities for government compliance frameworks.
Develop, maintain, and improve security policies, standards, and procedures aligned to NIST 800-53, NIST 800-171, and related frameworks.
Partner with engineering, IT, and cloud teams to implement and validate technical and administrative controls.
Support internal and external audits, including coordination with third-party assessors and government stakeholders.
Contribute to risk management activities across corporate systems, cloud infrastructure, products, vendors, and partners.
Assist with vendor and third-party risk management efforts, including security reviews and contract requirements.
Provide compliance reporting and support to leadership, contributing to strategic security planning as you grow in the role.
Support employee security awareness and compliance training initiatives.

2–5 years of experience in governance, risk, and compliance, information security, or a related field.
Exposure to or working knowledge of CMMC, FedRAMP, and/or DoD Impact Level environments (IL4/IL5).
Working knowledge of NIST 800-53, NIST 800-171, RMF, and related standards.
Experience operating in cloud environments (AWS, Azure, or GCP), preferably in regulated SaaS contexts.
Experience participating in or supporting audits, assessments, and remediation tracking efforts.
Excellent written and verbal communication skills with the ability to influence across teams.

Governance, Risk, and Compliance Analyst

Key skills