Senior Governance Risk and Compliance (BRC) Analyst

Overview:

The LP3 Governance, Risk, and Compliance (GRC) Analyst conducts GRC planning, configures, implements, and manages security devices through strategic and technical security mitigation planning. This involves daily threat analysis and incident management. This work includes threat risk assessments, identifying applicable high risk components in the environment, and responding to incidents following an approved Incident Response Plan.

Key Responsibilities:

• Provide strategic and technical security mitigation planning and participate in the design, development, and maintenance of GRC activities aligned with NIST 800-171 and DFAR guidelines
• Document and maintain GRC artifacts including process documentation, risk registers, and control mappings
• Develop, maintain, and track Plans of Actions and Milestones (POA&Ms), including remediation status and supporting evidence including escalation when appropriate
• Participate in stakeholders interviews, working sessions, and documentation reviews to support enterprise GRC assessments
• Provide technical expertise in the development, maintenance, and enhancement of corporate security operating procedures, standards and best practices
• Assist with preparation for internal and external audits, assessments, and regulatory reviews, including evidence collection and response coordination

Mandatory Qualifications:

• Bachelor's Degree in Cybersecurity, Engineering, Information Technology, or related field
• Minimum two (2) years of experience in cybersecurity, with exposure to OT/ICS environments. OR (6) years of experience may be considered in lieu of a bachelor’s degree.
• Experience supporting IT audits, risk assessments, or compliance assessments
• Working knowledge of CMMC security controls, NIST 800-171 requirements, and compliance processes
• Hands-on experience developing and maintaining POA&Ms
• Ability to follow defined processes while managing multiple compliance-related tasks
• Ability to travel up to 10%
• Active Secret clearance or the ability to obtain and maintain this clearance
• US Citizenship and residency

Desired Experience:

• Experience performing NIST-based security or technology risk assessments
• Industry certifications such as CISSP, CISA, CRISC, Security+, or similar credentials
• Strong written and verbal communication skills, particularly for documentation and audit response
• Detail-oriented with strong analytical and organizational skills
• Excellent verbal and written communication skills

Ideal Candidate:

This position is best filled by a self-motivated individual desiring to move up into more challenging positions working enterprise scale systems in high security environments. You need to work with a team as well as independently. This unique position requires backbone, perspective, excellent verbal and written communication skills, leadership as well as sound security technical expertise. This is an opportunity for a skilled individual to truly make a difference in National Security on a global scale. Apply to LP3 today.

Why LP3:

LP3 protects America with innovative cyber security and data science solutions.  We secure government and commercial businesses delivering military-grade solutions to help our clients maintain confidentiality, integrity, availability, and resilience over time. We solve hard challenges with innovative and cost-effective integrated solutions enabling the customer to meet their mission and business objectives.

We protect America by keeping critical IT and mission operations running securely in government, business, and non-profit organizations.  Think about what absolutely cannot fail in the organization—that’s what we protect.

LP3 also takes care of our people; most employees have been with us for 5 years or more. People matter to us. They are the core engine of our ability to help our clients succeed in complex global missions.

Company Profile:

LP3 has been providing mission critical services in the Defense Information Base, DoW, and Intelligence Community for over 20 years protecting and analyzing our nation’s most sensitive information.  LP3 expanded delivering innovative cyber security solutions to businesses now.  Services include, cyber, network architecture, AI, data science, SCRM, and many others.

We protect America by taking existing cyber and data solutions, quickly bundling them with new innovations, and creatively configure bridges to deliver advanced capability rapidly. Our experienced engineers use an agile “loose federation” approach to quickly plug services and tools together delivering innovative and adaptive results to clients much faster.

Benefits Offered:

Medical (including family), Dental, Vision, 401k match with 100% vesting from day 1, technical training, flexible work schedule, PTO, plus all Federal holidays.