Corporate Governance, Risk and Compliance Analyst

Onebrief

Corporate Governance, Risk, and Compliance Analyst at Onebrief managing RMF, CMMC, and SOC 2 compliance. Collaborating with various teams to ensure adherence to federal and corporate regulations.

Posted 7/8/2026full-timeRemote • 🇺🇸 United StatesSeniorLead💰 $160,000 - $200,000 per yearWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Own RMF authorizations across Department of War components and FedRAMP High, alongside CMMC 2.0 and SOC 2 compliance for corporate systems
Maintain authorization and audit evidence, including SSPs, SARs, POA&Ms, STIGs, and control mappings
Partner with Engineering, Product, and Security to embed compliance requirements into system design and CI/CD workflows, not bolt them on afterward
Coordinate internal assessments and external audit readiness across all applicable frameworks
Track regulatory and contractual changes and advise leadership on what they mean for Onebrief
Run risk assessments and vendor/supply chain risk reviews across both federal and corporate environments

Requirements

What you’ll need

U.S. Citizen
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field
8+ years in cybersecurity compliance
Hands-on expertise with RMF and at least one of CMMC 2.0 or SOC 2
One or more of the following certifications: CISSP, CISM, CISSO, CPTE, CySA+, FITSP-A, GCSA, CISA, ISSEP, GSLC, or GSNA
Experience with GRC platforms, including automated evidence collection and testing (eMASS experience a plus)

Benefits

Comp & perks

Equity: Share in the company's success.
Flexible Work Environment: Remote-first organization with flexible work hours and unlimited PTO.
Comprehensive Health Coverage: Health, dental, vision, and life insurance.
Retirement Plan: 401(k) plan with company match to secure your future.
Parental Leave: 8 weeks at 100% regardless of state.
Company Retreats: Annual company summit trips.
Home Office Budget: $1,000 per year for home office improvements.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Cybersecurity ComplianceRisk AssessmentAuthorization MaintenanceAudit Evidence ManagementControl MappingSSP DevelopmentSAR DevelopmentPOA&M ManagementSTIG ImplementationCI/CD Workflow Integration

Soft Skills

CollaborationAdvisory SkillsCommunication

Certifications

CISSPCISMCISSOCPTECySA+FITSP-AGCSACISAISSEPGSLC