Operations
Compliance / GRC Specialist
Own control mapping and compliance authoring — NIST 800-171 and adjacent federal frameworks — as a distinct discipline from security/architecture review.
- Location
- United States — remote
- Work schedule
- Full-time
- Engagement
- Contract (1099)
- Appointment term
- Ongoing
- Seniority
- Senior
- Department
- Operations
- Remote policy
- Remote
- Hiring status
- Open
- Applications close
- October 31, 2026
- Eligible work jurisdictions
- United States
- Work eligibility
- Authorized to work in the U.S.; no sponsorship available
- Clearance requirement
- Must be eligible to obtain
- Clearance level
- No clearance required
- Expected travel
- 0%
- Veteran friendly
- Yes
The role
Wilkes & Liberty's federal and regulated-client work depends on compliance evidence that is accurate, current, and defensible — not assembled after delivery. You will own control mapping and compliance authoring, distinct from the Security / Architecture Reviewer's technical design review.
What you will own
- The assessed system boundary and shared-responsibility model for each engagement in scope of NIST 800-171 or a comparable federal or regulated framework.
- Mapping of each applicable requirement to implementation evidence, an evidence owner, a review cadence, and any open gap.
- POA&M items carried through to verified closure, not left open indefinitely.
- Compliance narratives and evidence artifacts that hold up under external audit or client review.
- Collaboration with the Security / Architecture Reviewer on applicable obligations, while keeping technical security findings distinct from control narratives or certification claims.
- Early escalation of compliance gaps before they become delivery or contractual risk.
What you bring
- Experience with control mapping or compliance authoring against a federal or regulated framework such as NIST 800-171.
- Ability to produce evidence artifacts that hold up under external audit or client review.
- Comfort working directly with engineering teams to extract compliance-relevant detail.
- Clarity that a reviewed design and documented evidence are not the same as a certified system. This role does not claim certification or legal sufficiency.
Helpful experience
- CMMC, NIST 800-53, FISMA/FedRAMP, SSPs, or assessment-evidence work.
- Regulated third-party review or audit support.
Equal opportunity and accommodations. Wilkes & Liberty considers qualified candidates without regard to protected characteristics. Reasonable accommodations are available during the application process.