GRC Automation Engineer

Responsibilities

• Design, develop, and maintain automated workflows supporting RMF, Assessment and Authorization (A&A), and cybersecurity governance
• Develop integrations between GRC platforms, vulnerability management systems, and security tools via APIs
• Automate evidence collection, control validation, and recurring compliance activities
• Support implementation and optimization of GRC platforms like JCAM or ServiceNow
• Develop scripts, dashboards, and automation workflows to improve visibility into authorization status and vulnerability remediation
• Collaborate with RMF analysts and ISSOs to identify manual processes for automation
• Evaluate emerging technologies like AI/ML to improve documentation and workflow efficiency
• Maintain automation documentation, workflow diagrams, and technical procedures

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related technical discipline
• 3+ years of experience developing automation solutions for cybersecurity or enterprise IT
• Proficiency in scripting/automation languages such as Python, PowerShell, or JavaScript
• Experience integrating enterprise platforms through REST APIs or web services
• Working knowledge of NIST RMF, FISMA, and cybersecurity governance processes
• Experience developing dashboards and operational data visualizations
• Strong analytical and technical documentation skills

Preferred Qualifications

• Experience supporting NIH, HHS, or other Federal civilian agencies
• Experience with JCAM, eMASS, ServiceNow GRC, Archer, or Microsoft Power Platform
• Familiarity with AI-assisted workflow automation and document generation
• Experience in Agile development environments
• Certifications such as Security+, CGRC, CISSP, or Microsoft Power Platform certifications

About the Company

True Zero Technologies is a veteran-owned small business dedicated to the purposeful enablement of people and technology. Recognized as a Best Place to Work and an Inc. 5000 fastest-growing company, True Zero focuses on delivering top-tier services through a people-first approach.