Senior Governance Risk and Compliance (BRC) Analyst

Overview

The Governance, Risk, and Compliance (GRC) Analyst at LP3 is responsible for planning and managing governance, risk, and compliance operations, configuring and operating security devices, and conducting threat analysis and incident response. The role involves evaluating risk, identifying high-risk components in systems, and following established Incident Response Plans to handle events.

Key Responsibilities

• Develop and implement strategic and technical security mitigation plans aligned with NIST 800-171 and DFAR standards.
• Create and update GRC documentation such as process guides, risk registers, and control mappings.
• Manage Plans of Actions and Milestones (POA&Ms), tracking remediation progress and gathering supporting documentation including escalation procedures when necessary.
• Engage with stakeholders through interviews, collaborative sessions, and document reviews to contribute to enterprise-wide GRC evaluations.
• Provide technical guidance in formulating, updating, and improving corporate security procedures, standards, and best practices.
• Assist in preparation and coordination of audit evidence collection for internal and external audits and regulatory assessments.

Required Qualifications

• Bachelor's degree in Cybersecurity, Engineering, Information Technology, or related fields.
• At least 2 years of cybersecurity experience, preferably including operational technology (OT) or industrial control systems (ICS), or alternatively 6 years of relevant experience without a degree.
• Experience supporting IT audits, risk and compliance assessments.
• Familiarity with CMMC security controls, NIST 800-171 compliance requirements, and related compliance frameworks.
• Practical experience in creating and maintaining POA&Ms.
• Ability to follow structured processes managing multiple compliance tasks concurrently.
• Willingness to travel up to 10% of the time.
• Active or eligible for Secret security clearance.
• Must be a US citizen and resident.

Preferred Experience

• Proficiency in performing NIST-based security or technology risk evaluations.
• Relevant certifications such as CISSP, CISA, CRISC, Security+, or comparable credentials.
• Strong skills in written and verbal communication, especially for documentation and audit responses.
• Detail-oriented with robust analytical and organizational abilities.

Ideal Candidate Attributes

The ideal candidate is a driven professional seeking advancement to more challenging roles within enterprise-scale, high-security environments. They are equipped with leadership qualities, excellent communication skills, the ability to work independently and collaboratively, and a solid security technical background. This position offers a unique chance to contribute significantly to national security on a global level.

About LP3

LP3 is committed to protecting America with innovative cybersecurity and data science solutions tailored for government and commercial clients. We specialize in delivering military-grade capabilities that ensure confidentiality, integrity, availability, and resilience of IT operations. Our approach combines existing cyber and data tools with new innovations to provide rapid and adaptive solutions supporting mission-critical functions. LP3 values its employees, many of whom have been part of our team for over five years, recognizing that their people drive success in complex global missions.

Company Overview

With over two decades of experience, LP3 has served the Defense Information Base, Department of the Navy, and Intelligence Community, securing the nation’s most sensitive data. We now extend our innovative cybersecurity offerings to businesses, including services in cyber operations, network architecture, artificial intelligence, data science, and supply chain risk management.

Benefits

• Comprehensive medical, dental, and vision coverage including family plans.
• 401(k) plan with matching contributions and full vesting starting day one.
• Technical training opportunities and flexible work schedules.
• Paid time off and all federal holidays observed.