GRC Analyst; R3666

Staff GRC Analyst (R3666)

Washington, DC

$120,000 - $190,000 a year

We are seeking a detail‑oriented GRC Analyst to support our security and compliance initiatives across the organization. This role will drive the execution of key certifications such as CMMC, ISO 27001, and other industry‑related standards, ensuring readiness through audit preparation, documentation, and cross‑functional coordination. The analyst will develop and maintain customer‑facing collateral, including standardized RFI/RFP responses and security whitepapers. They will also monitor internal controls, track remediation efforts, and help align teams with regulatory and contractual requirements.

• Lead audit preparation, execution, and remediation efforts for certifications such as CMMC, ISO 27001, and other industry‑aligned standards.
• Develop and maintain security compliance collateral, including policies, whitepapers, and standardized RFI/RFP responses.
• Collaborate with cross‑functional teams (Security, IT, Legal, Engineering) to implement and track control requirements.
• Monitor regulatory obligations and maintain audit readiness through continuous assessment and documentation.
• Support customer trust efforts by aligning compliance initiatives with business growth and contractual requirements.

• 5+ years of experience in GRC, compliance, or information security roles, with a focus on both commercial and government customer requirements.
• Proven track record of leading audit readiness and certification efforts for frameworks such as CMMC, ISO 27001, NIST 800‑53, or similar.
• Strong understanding of regulatory and contractual obligations in both federal and enterprise environments.
• Exceptional communication and documentation skills, with experience developing customer‑facing compliance materials.
• Ability to work independently, influence cross‑functional teams, and prioritize in a fast‑paced, high‑growth environment.

• Experience leading security and compliance programs in defense, aerospace, or other highly regulated environments.
• Deep familiarity with CMMC and ISO 27001 frameworks, along with related government or industry requirements.
• Proven ability to independently interface with customers, address security inquiries, and represent the company’s posture with confidence.
• Industry certifications such as CISSP, CISM, CISA, CRISC, or Certified CMMC Professional (CCP).
• Strong influence skills—able to drive cross‑functional results, overcome resistance, and align stakeholders toward compliance goals.

• Full‑time regular employee offer package:
  Pay within range listed + Bonus + Benefits + Equity.
• Temporary employee offer package:
  Pay within range listed above + temporary benefits package (applicable after 60 days of employment).
• Salary compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location.
• All offers are contingent on a cleared background and possible reference check. Military Fellows and part‑time employees are not eligible for benefits.

Mid‑Senior level

Full‑time

Business Development and Sales

Software Development

Shield AI is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or Veteran status. If you have a disability or special need that requires accommodation, please let us know.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.