About this opportunity
Moraph LLC lists this Senior GRC Implementation Engineer (FedRAMP / SOC 2) opportunity in northern, Kentucky. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Turn control frameworks into working configuration. You will own the technical implementation of FedRAMP High and SOC 2 Type II controls across our proprietary SaaS and managed landing zones, and produce the evidence our clients hand to their auditors.
What you'll do
Map FedRAMP High, SOC 2 and NIST 800-53 controls to concrete platform configuration and automated checks
Build "governance-as-code" pipelines that generate System Security Plan artifacts from live configuration
Run continuous control monitoring and drive remediation of configuration drift with engineering teams
Prepare evidence packs for client audits and support assessors during authorization cycles
Advise product teams on control inheritance for newly acquired applications moving into our boundary
What you'll bring
5+ years in GRC engineering, security compliance or cloud security
Hands-on experience delivering a FedRAMP (Moderate or High) or SOC 2 Type II program
Working knowledge of AWS or Azure security services and infrastructure-as-code
Ability to explain control intent to engineers and evidence quality to auditors
US citizenship required for access to FedRAMP boundaries
Compensation
$220,000 – $250,000 per year.
#J-18808-Ljbffr
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.