GRC Lead

We are seeking a Cloud Cybersecurity Engineer Junior / GRC Lead to support Governance, Risk, and Compliance (GRC) activities within cloud and data center environments. This position will assist with security compliance, risk and vulnerability management, security documentation, incident reporting, and information assurance activities designed to protect information, information systems, and networks from security threats. The GRC Lead will work under technical supervision and coordinate with cybersecurity, Information Assurance (IA), Security Operations Center (SOC), cloud, and other technical teams to support security requirements and timely remediation of identified risks and vulnerabilities., * Support Governance, Risk, and Compliance activities within cloud and data center environments.

• Assist with identifying, analyzing, documenting, and reporting cybersecurity risks, vulnerabilities, and security events.
• Support the identification and mitigation of vulnerabilities, including the use of alternate or compensating controls when necessary.
• Track identified security issues and vulnerabilities and coordinate with appropriate technical teams to support timely remediation.
• Assist with security compliance documentation, reporting, and maintenance of supporting evidence.
• Support information assurance activities and security controls within cloud environments.
• Monitor and report potential security violations and assist with appropriate response and mitigation activities.
• Support security incident reporting and coordinate with appropriate cybersecurity and technical personnel.
• Assist with vulnerability management activities associated with the National Vulnerability Database, US-CERT alerts, IA Vulnerability Alerts (IAVA), IA Vulnerability Bulletins (IAVB), and Technical Advisories (TA).
• Support tracking and implementation of applicable security patches and vulnerability remediation activities.
• Coordinate with IA personnel to support, monitor, test, and troubleshoot security-related issues.
• Support Security Operations Center (SOC) activities as required.
• Assist with security testing and validation activities within cloud and enterprise environments.
• Support authorized penetration-testing activities and documentation of identified findings.
• Assist with the installation, operation, maintenance, testing, and troubleshooting of Information Assurance systems.
• Prepare and maintain cybersecurity documentation, reports, findings, remediation status, and other security-related records.
• Work with technical and business stakeholders to communicate security requirements, risks, findings, and remediation activities.
• Perform assigned cybersecurity and information assurance activities under technical supervision.

• Bachelor s degree.
• Minimum of 1 year of relevant cybersecurity, information assurance, GRC, cloud security, or related experience.
• General knowledge of cybersecurity, information assurance, risk management, and security compliance concepts.
• Understanding of vulnerability identification, tracking, remediation, and compensating controls.
• Familiarity with security incident identification, reporting, and response processes.
• Understanding of security vulnerabilities, security patches, and vulnerability advisories.
• Ability to support security documentation, reporting, compliance tracking, and remediation activities.
• General understanding of cloud and data center security environments.
• Ability to work with cybersecurity, IA, SOC, cloud, and technical teams.
• Strong analytical, organizational, documentation, and communication skills.
• Ability to work under direct or technical supervision and support assignments of moderate complexity.

Zenius Corporation is an employee-oriented company. Join us now and help us grow! We offer a competitive benefits package that includes paid holidays and paid time off, medical insurance including health, vision, dental insurance, 401K matching, Flexible Spending Account and flexible schedules, as per business needs. We also work with our employees on training and professional certification plans that benefit the employee. Equal Opportunity Employer: Zenius Corporation provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws. Zenius complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Zenius Corporation expressly prohibits any form of unlawful employee harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status.

Headquartered in Leesburg, Virginia, Zenius Corporation is a HUBZone-certified small business. Zenius specializes in providing Grants Management, IT Modernization, Acquisition Management, and Financial Management services to Federal agencies. Zenius is selected by Inc 5000 as one of the fastest-growing companies in the DC Metro Area, awarded in 2025, 2024, 2021, and 2020. Zenius is also listed by Financial Times as one of the fastest-growing companies in the Americas in 2021. Zenius is an awardee of 2019 Best of Leesburg winner (Business Management Consultant category).