Kaseware

Compliance

• Support governance, risk, and compliance (GRC) initiatives across multiple frameworks, including NIST 800-53/800-171, ISO 27001/27701, PCI DSS, and FedRAMP.
• Assist in developing and maintaining compliance documentation, policies, procedures, and control mappings across frameworks.
• Enable centralized GRC tooling to streamline evidence collection, artifact management, and automated reporting.
• Partner with engineering, security, and operations teams to ensure system configurations and processes align with compliance requirements.
• Monitor regulatory updates and framework revisions to maintain continuous compliance.
• Support internal and external audits by coordinating evidence gathering, preparing documentation, and ensuring audit readiness.
• Perform control assessments and risk reviews to identify gaps and propose remediation plans.
• Contribute to the improvement of compliance workflows through automation and best practices.

Governance, Risk and Compliance Engineer