Cyber Risk & Compliance Specialist

WiredPeople, Inc.

Cyber Risk & Compliance Specialist ensuring the highest levels of security for technology partners in government. Driving compliance with NIST frameworks and other regulatory standards.

Posted 5/12/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSeniorWebsite

About the role

Key responsibilities & impact

Drive and support ATO readiness efforts across NIST 800-53, CMMC, and SOC 2 frameworks, focusing heavily on hands-on control implementation and evidence generation.
Prepare, manage, and maintain ATO package documentation (SSPs, POA&Ms, and supporting artifacts), ensuring continuous accuracy, completeness, and audit-readiness.
Coordinate seamlessly with external consultants and assessors, integrating their feedback into remediation strategies and documentation updates.
Proactively track remediation progress and control gaps, escalating blockers and risks as needed.
Draft, refine, and operationalize robust security policies, procedures, and standards aligned with applicable regulatory frameworks.
Ensure controls are comprehensively documented with clear ownership, concrete implementation evidence, and recurring review cycles.
Partner with Technology, Product, and Operations teams to seamlessly embed compliance requirements into existing workflows and toolsets.
Manage and maintain the POA&M, driving the timely closure of identified gaps in tight coordination with system and control owners.
Support ConMon activities, including meticulous log reviews, control validation, and recurring evidence collection.
Assist with risk assessments, vendor security reviews, and the tracking of corrective actions.
Maintain a state of ongoing audit preparedness through disciplined recordkeeping and strict process adherence.
Serve as an approachable, knowledgeable compliance champion for Engineering, Infrastructure, and Operations teams.
Translate rigid control requirements and framework language into clear, practical guidance that business owners can easily act on.
Facilitate collaborative working sessions with system owners to gather evidence, clarify control expectations, and resolve complex implementation questions.
Communicate clearly and frequently on status, timelines, and open items to ensure stakeholders remain aligned.

Requirements

What you’ll need

3–6 years of demonstrated experience in GRC, federal security compliance, or a closely related technical role.
Deep, hands-on familiarity with NIST 800-53 is required.
Proven track record of preparing ATO packages, SSPs, and POA&Ms.
Solid working knowledge of CMMC, SOC 2, or NIST 800-171 environments.
Demonstrated ability to implement and evidence controls, not just document them.
Strong organizational and project management skills, with the ability to manage multiple complex workstreams with minimal oversight.
Clear, highly effective written and verbal communication skills.
U.S. citizenship is required; ability to support stringent federal compliance requirements.

Benefits

Comp & perks

Equal employment opportunities (EEO) to all employees and applicants

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

NIST 800-53CMMCSOC 2ATO package preparationSSPsPOA&Mscontrol implementationrisk assessmentsvendor security reviewsaudit preparedness

Soft Skills

organizational skillsproject management skillswritten communicationverbal communicationcollaborationproblem-solvingstakeholder managementadaptabilityattention to detailapproachability