> Markdown version of [/jobs/ext/1237936-junior-fedramp-consultant-grc-analyst-i](https://www.wearedevelopers.com/jobs/ext/1237936-junior-fedramp-consultant-grc-analyst-i). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Junior FedRAMP Consultant (GRC Analyst I) - **Company:** C2 Labs, Inc - **Location:** United States (Remote available) - **Experience:** Starter - **Contract:** Permanent contract - **Skills:** Microsoft Word, Microsoft Excel, Artificial Intelligence, Spreadsheets, Cyber Security, Issue Tracking Systems, Smartsuite, Microsoft SharePoint, Software Version Control, Servicenow, Plan of Action and Milestones - **Published:** July 11, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=144dd43f59b8fb56 ## About the Role C2 Labs is looking for a Junior FedRAMP Consultant (GRC Analyst I) to support technical writing and evidence operations for FedRAMP authorization and ongoing ConMon. This is a great role if you're detail-oriented, enjoy structured writing, and want hands-on exposure to FedRAMP delivery., * Associates degree in IT, Cybersecurity, or related field * 1-3 years experience in GRC, audit support, compliance operations, or security documentation. * Strong written communication and attention to detail (templates, tables, and structured documents). * Basic familiarity with NIST 800-53 concepts or willingness to learn quickly. * Comfort working with spreadsheets and tracking artifacts across multiple stakeholders. * Reliable follow-through and responsiveness in a fast-moving delivery environment. Preferred / nice to have * Any FedRAMP exposure (coursework, prior engagement support, or template familiarity). * Experience with GRC tools (RegScale, ServiceNow GRC, Archer) and/or ticketing systems. * Security+ or similar entry-level security certification. Tools & environment * RegScale (linking evidence, updating workflows, POA&M maintenance) * Microsoft Word/Excel (FedRAMP templates and attachments) * Teams/SharePoint and customer-approved artifact repositories Engagement details * 1099 independent contractor (initial engagement); project-based with potential extension. * Remote-first; minimal travel expected. * No clearance required; must be able to pass a standard background check and sign NDA/SOW. * Hours vary by customer phase; consistent availability during business hours is important. ## Description * Support drafting and formatting of SSP/KSI artifacts, policies, and plans. * Collect and organize evidence; maintain traceability in RegScale. * Maintain trackers for actions, evidence requests, and POA&Ms. * Help compile monthly/quarterly ConMon reporting inputs., * Support drafting and formatting of FedRAMP artifacts (SSP sections, KSI summaries, policies, plans, appendices) under Senior Consultant guidance. * Collect, organize, and quality-check evidence artifacts (naming standards, version control, completeness) and link evidence in RegScale. * Maintain trackers for open actions, evidence requests, POA&M items, and deliverable status. * Capture meeting notes and translate outcomes into updated documents, RegScale tasks, or action items. * Support ConMon deliverables: compile scan outputs, update inventories/POA&Ms, and prepare monthly/quarterly reporting packages. * Perform internal quality checks for template fidelity, cross-references, and completeness before SME review. Key deliverables / outputs * Well-formatted draft artifacts and appendices ready for Senior/SME review. * Clean evidence library with links and traceability maintained in RegScale. * Up-to-date action/evidence/POA&M trackers and ConMon reporting inputs., * Applies AI tools to streamline workflows, enhance decision-making, and improve outcomes * Understands the strengths and limitations of AI systems and exercises sound judgment in their use * Continuously explores new AI capabilities and integrates them into day-to-day work where appropriate * Uses AI in alignment with company and customer-specific policies, data privacy standards, and ethical guidelines * Exercises discretion when using AI with sensitive or proprietary information * Demonstrates awareness of bias, accuracy, and risk considerations when leveraging AI tools ## Related Videos - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Launching a marketplace on-time: A lesson in taking shortcuts using spreadsheets!](https://www.wearedevelopers.com/videos/477-launching-a-marketplace-on-time-a-lesson-in-taking-shortcuts-using-spreadsheets) - [From Global Capability Centers to AI-Powered Command Centers](https://www.wearedevelopers.com/videos/100096-from-global-capability-centers-to-ai-powered-command-centers) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) - [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [A call for Guest Writers for the WeAreDevelopers Magazine](https://www.wearedevelopers.com/magazine/648-a-call-for-guest-writers-for-the-wearedevelopers-magazine) - [Best Job Boards for Remote Work for Developers](https://www.wearedevelopers.com/magazine/290-best-job-boards-for-remote-work-for-developers)