Associate GRC Analyst

ARS is looking for an Associate Governance, Risk and Compliance (GRC) Analyst. The GRC Analyst will be responsible for ensuring that the organization’s Arkloud cloud infrastructure meets regulatory standards and aligns with internal policies, while also providing support for end-user compliance concerns as part of the ARS GRC team. This role requires a combination of compliance knowledge and strong troubleshooting skills to assist in adjudicating cybersecurity controls under the Department of Defense (DoD) Risk Management Framework (RMF). The ideal candidate is well-organized, has excellent soft skills, and enjoys working collaboratively across compliance and IT support functions.

Why Work with us?

Applied Research Solutions (ARS) is respected as a world-class provider of technically integrated solutions as we deliver premier talent and technology across our focused markets for unparalleled, continuous mission support.Awarded a Best Places to Work nominee since 2020, ARS recognizes that without our career- driven, loyal professionals, we would not be able to deliver state-of-the-art results for our mission partners. We firmly believe that prioritizing our employees is of the upmost importance. We provide a culture where our employees are challenged to meet their career goals and aspirations, while still obtaining a work/life balance. ARS employees are motivated through our industry competitive benefits package, our awards and recognition program, and personalized attention from ARS Senior Managers.

Responsibilities:

• Assist with security control adjudication and System Security Plan (SSP) development in the Enterprise Mission Assurance Support System (eMASS) application.
• Assess Control Correlation Identifiers (CCIs) for applicability in cloud tenant environments and coordinate implementation of security controls throughout the cloud infrastructure.
• Conduct compliance audits, assessments, and risk analysis to ensure adherence to standards such as NIST 800-53 Rev 5, and NIST 800-171.
• Collaborate with IT and security teams to establish and monitor compliance-related technical controls.
• Document and maintain compliance activities, including audit findings, corrective actions, and procedural updates.
• Support the development and implementation of IT compliance policies, ensuring systems and practices are aligned with regulations.
• Assist in preparing reports for internal and external audits, documenting compliance status, and creating mitigation plans for non-compliance issues.
• Stay informed on updates in compliance regulations and recommend updates to policies and practices.
• Conduct compliance training and awareness sessions for IT staff and end-users as needed.
• Other duties as assigned

Qualifications:

• Must be a US citizen
• Bachelor’s degree in Cybersecurity Management, or related field (or equivalent experience).
• Experience in IT compliance, IT support, or related roles.
• Working knowledge of government IT compliance frameworks (NIST 800-53 Rev 5, NIST 800-171) and basic IT security concepts.
• Familiarity with Federal/State cybersecurity requirements, and the Aerospace Industry.
• Strong multi-tasking abilities and excellent communication skills, both written and verbal.

Preferred Skills:

• Master's degree in cybersecurity-related field is preferred.
• Experience in Microsoft Azure environments.
• Experience with Governance, Risk, and Compliance (GRC) tools (e.g., eMASS, XACTA).
• Ability to work well in a cross-functional team environment, especially with compliance, IT support, and security teams.
• Strong organizational skills, with the ability to manage multiple tasks and maintain thorough documentation.
• Relevant certifications (e.g., Certified Information Systems Auditor (CISA), CompTIA Sec+, ITIL Foundation).

All positions at Applied Research Solutions are subject to background investigations. Employment is contingent upon successful completion of a background investigation including criminal history and identity check.

The contractor and subcontractor shall abide by the requirements of 41 CFR 60-741.5(a). This regulation prohibits discrimination against qualified individuals on the basis of disability, and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified individuals with disabilities.

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-300.5(a). This regulation prohibits discrimination against qualified protected veterans, and requires affirmative action by covered contractors and subcontractors to employ and advance in employment qualified protected veterans.