Grc Consultant

Job Title: GRC Consultant
Location: Phoenix, AZ (Hybrid)
Position Type: 4-month contract-to-hire. Candidates must be eligible to convert to an FTE.

Candidates must be local to AZ and available for in person interview.

• NIST 800-53R5 (Must have)
• Risk Management Framework (RMF)
• Windows/Unix experience

• Project Management experience
• CISSP, CCSP, GSTRT, GSNA, or CAP certification

Perform risk assessments, audit reviews, generate findings reports, and make appropriate recommendations for improvement and track outcomes from those activities for DES reporting requirements.

Develop and formulate comprehensive reports detailing the findings, areas of non-compliance, required POA&Ms (Plan of Action and Milestones), environmental observations, and incident reports.

Review, update, and manage security related audit plans, security plans and risk plan documentation for accuracy and consistency, proactively solves problems.

Evaluate data and formulate comprehensive reports detailing the findings, areas of non-compliance, required action plans, and environmental observations.

Generates incident reports and investigates suspicious network activity.

Preparing audit documentation that supports audit results, drafting and editing audit findings to adhere to the standards and the agency's writing style.

Research agency and industry IT security practices standards, best practices, laws and regulations, and other applicable resources, ensures compliance with standards.

For applications and inquiries,