SETA Engineer – Governance, Risk & Compliance (GRC)

Position Title: SETA Engineer – Governance, Risk & Compliance (GRC)
Position Type: Full-Time, On-Site
Location: Chantilly, VA
Clearance: Active Top Secret/SCI with Polygraph

Waypoints client is seeking an experienced Systems Engineering and Technical Assistance (SETA) Engineer specializing in Governance, Risk, and Compliance (GRC) to support the Cyber Assurance and Innovation Division. This position will provide technical expertise, cybersecurity engineering support, and advisory services to strengthen enterprise security governance, evaluate cybersecurity risks, and ensure information systems align with applicable security policies, standards, and compliance requirements.

The ideal candidate will possess a strong background in cybersecurity, information systems security engineering, and enterprise risk management, with the ability to assess security architectures, evaluate technical requirements, and provide actionable recommendations to government stakeholders. This individual must be capable of working independently, collaborating with multidisciplinary teams, and effectively communicating technical findings, risk assessments, and strategic recommendations to leadership.

Responsibilities

- Provide Systems Engineering and Technical Assistance (SETA) support to the Cyber Assurance and Innovation Division, focusing on cybersecurity governance, risk management, compliance, and enterprise security engineering.

- Support the development, evaluation, and implementation of cybersecurity governance frameworks, security policies, technical standards, and compliance processes.

- Apply security engineering principles throughout the system design, development, integration, and implementation lifecycle.

- Assess enterprise systems, networks, operating systems, and databases to identify potential security risks, vulnerabilities, and compliance gaps.

- Evaluate cybersecurity architectures, security controls, and technical designs to ensure alignment with organizational security requirements and mission objectives.

- Support cybersecurity risk assessments, security requirements analysis, and the development of risk mitigation strategies.

- Provide technical guidance and recommendations to government stakeholders regarding cybersecurity compliance, enterprise security posture, and risk-based decision-making.

- Review security documentation, technical assessments, and compliance artifacts to identify deficiencies and recommend corrective actions.

- Collaborate with systems engineers, cybersecurity professionals, program managers, and government stakeholders to integrate security requirements into enterprise solutions.

- Support the evaluation and implementation of cybersecurity controls in accordance with applicable federal security standards, policies, and risk management requirements.

- Analyze cybersecurity risks and compliance findings to identify trends, prioritize corrective actions, and recommend improvements to enterprise security processes.

- Provide independent technical assessments and advisory support to assist government leadership with cybersecurity planning, governance, and oversight activities.

- Prepare and deliver technical briefings, cybersecurity risk assessments, compliance findings, and recommendations to government leadership and other stakeholders.

- Work independently to manage assigned responsibilities, resolve technical challenges, and support program objectives with minimal oversight.

- Communicate effectively with cross-functional teams to ensure cybersecurity governance, risk management, and compliance considerations are incorporated into technical and operational decisions.

Required

- Active Top Secret/SCI clearance with Polygraph.

- IAM Level III certification in accordance with applicable DoD cybersecurity workforce requirements.

- Bachelor's degree or higher from an accredited institution, preferably in a STEM discipline such as Computer Science, Cybersecurity, Information Technology, Engineering, or a closely related technical field.

- Minimum of five (5) years of professional experience in cybersecurity, information systems security engineering, enterprise security, governance, risk management, compliance, or a closely related technical discipline.

- Demonstrated knowledge of network protocols, operating systems, and database security concepts and practices.

- Experience applying security engineering principles during system design, development, and implementation.

- Strong understanding of enterprise cybersecurity architectures, security controls, risk management methodologies, and compliance requirements.

- Ability to assess cybersecurity risks, evaluate technical security requirements, and provide practical engineering and risk mitigation recommendations.

- Experience reviewing technical security documentation, evaluating security controls, and identifying cybersecurity compliance gaps.

- Understanding of cybersecurity governance principles, security policies, and risk-based decision-making processes.

- Ability to provide technical guidance and advisory support to government stakeholders and multidisciplinary engineering teams.

- Strong analytical, troubleshooting, and problem-solving skills.

- Self-motivated professional capable of working independently and managing responsibilities with minimal supervision.

- Excellent interpersonal and communication skills, with the ability to collaborate effectively in a team-oriented environment.

- Ability to communicate complex technical information clearly and provide cybersecurity assessments, risk evaluations, compliance findings, and recommendations to technical teams, government stakeholders, and senior leadership as needed.