> Markdown version of [/jobs/ext/3078695-grc-lead](https://www.wearedevelopers.com/jobs/ext/3078695-grc-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Lead

- **Company:** Zenius Corporation
- **Location:** Leesburg, VA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Cyber Security, Information Systems, Databases, Data Centers, Service Pack, Security Information and Event Management, Software Vulnerability Management
- **Published:** September 25, 2026
- **Apply:** https://www.careerjet.com/jobad/usdeb580293338f89b87fc1e7591acd3fe

## About the Role

* Bachelor s degree.
 * Minimum of 1 year of relevant cybersecurity, information assurance, GRC, cloud security, or related experience.
 * General knowledge of cybersecurity, information assurance, risk management, and security compliance concepts.
 * Understanding of vulnerability identification, tracking, remediation, and compensating controls.
 * Familiarity with security incident identification, reporting, and response processes.
 * Understanding of security vulnerabilities, security patches, and vulnerability advisories.
 * Ability to support security documentation, reporting, compliance tracking, and remediation activities.
 * General understanding of cloud and data center security environments.
 * Ability to work with cybersecurity, IA, SOC, cloud, and technical teams.
 * Strong analytical, organizational, documentation, and communication skills.
 * Ability to work under direct or technical supervision and support assignments of moderate complexity.

## Description

We are seeking a Cloud Cybersecurity Engineer Junior / GRC Lead to support Governance, Risk, and Compliance (GRC) activities within cloud and data center environments. This position will assist with security compliance, risk and vulnerability management, security documentation, incident reporting, and information assurance activities designed to protect information, information systems, and networks from security threats.
The GRC Lead will work under technical supervision and coordinate with cybersecurity, Information Assurance (IA), Security Operations Center (SOC), cloud, and other technical teams to support security requirements and timely remediation of identified risks and vulnerabilities., * Support Governance, Risk, and Compliance activities within cloud and data center environments.

 * Assist with identifying, analyzing, documenting, and reporting cybersecurity risks, vulnerabilities, and security events.
 * Support the identification and mitigation of vulnerabilities, including the use of alternate or compensating controls when necessary.
 * Track identified security issues and vulnerabilities and coordinate with appropriate technical teams to support timely remediation.
 * Assist with security compliance documentation, reporting, and maintenance of supporting evidence.
 * Support information assurance activities and security controls within cloud environments.
 * Monitor and report potential security violations and assist with appropriate response and mitigation activities.
 * Support security incident reporting and coordinate with appropriate cybersecurity and technical personnel.
 * Assist with vulnerability management activities associated with the National Vulnerability Database, US-CERT alerts, IA Vulnerability Alerts (IAVA), IA Vulnerability Bulletins (IAVB), and Technical Advisories (TA).
 * Support tracking and implementation of applicable security patches and vulnerability remediation activities.
 * Coordinate with IA personnel to support, monitor, test, and troubleshoot security-related issues.
 * Support Security Operations Center (SOC) activities as required.
 * Assist with security testing and validation activities within cloud and enterprise environments.
 * Support authorized penetration-testing activities and documentation of identified findings.
 * Assist with the installation, operation, maintenance, testing, and troubleshooting of Information Assurance systems.
 * Prepare and maintain cybersecurity documentation, reports, findings, remediation status, and other security-related records.
 * Work with technical and business stakeholders to communicate security requirements, risks, findings, and remediation activities.
 * Perform assigned cybersecurity and information assurance activities under technical supervision.