eGRC Data Specialist

Who we are:

ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a “work hard, play hard” mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community.  

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 144 hours of PTO, 11 holidays, 85% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement and more.

Who we’re looking for:

We are seeking an eGRC Data Specialist to support the implementation of a new enterprise Governance, Risk and Compliance (eGRC) platform by leading data discovery, migration and transformation activities. This role is responsible for analyzing, mapping and migrating cybersecurity and Risk Management Framework (RMF) data from legacy systems into Open Security Controls Assessment Language (OSCAL)-compliant formats while supporting reporting, dashboard development and workflow modernization. The eGRC Data Specialist position partners with internal stakeholders and Professional Services resources to ensure accurate, efficient and high-quality data migration throughout the implementation lifecycle. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What you’ll be doing:

• Perform data discovery activities functions.
• Coordinate and collaborate with Professional Services resources to execute data migration activities.
• Analyze data exports.
• Develop automated scripts to support data parsing and extraction.
• Draft assessments and reports related to data migration activities.
• Identify and categorize RMF artifacts for migration or archival.
• Discover System Security Plans (SSPs), control artifacts, assessment trackers and other RMF artifacts stored in Microsoft Excel and Microsoft Word for migration.
• Transform legacy data and schemas into OSCAL-compliant formats.
• Leverage artificial intelligence (AI) tools to support data migration activities.
• Review Microsoft SharePoint repositories to identify artifacts for migration.
• Capture legacy system workflows, dashboards and reports for migration.
• Reproduce and enhance workflows, dashboards and reports within the new eGRC platform.
• Develop custom dashboards, reports and content.
• Work with stakeholders to generate and present key metrics.
• Contribute to the development of System Development Lifecycle (SDLC) artifacts.
• Advise on data-related topics and support data-related inquiries.

What you need to know:

• Data migration and data modeling principles.
• Cybersecurity and RMF concepts and best practices.
• Legacy-to-target data transformation and schema mapping.
• OSCAL and cybersecurity data management concepts.
• Dashboard, workflow and reporting development.
• SDLC processes and Agile methodologies.

Must have’s:

• Bachelor's degree in Information Management, Cybersecurity, Data or a related field.
• 3+ years of professional experience working with cybersecurity and information technology (IT) data.
• Strong understanding of and experience with RMF.
• Strong understanding of cybersecurity best practices.
• Experience performing security engineering functions.
• Experience developing and modifying scripts.
• Experience mapping inheritance and Common Control Catalogs.
• Experience developing or tuning risk scoring.
• Experience mapping data schemas.
• Experience working with OSCAL.
• Experience working on Federal systems.
• Experience working in Amazon Web Services (AWS) GovCloud.
• Experience working with SDLC.
• Experience working in an Agile environment.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must currently be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.

Beneficial to have:

• Top Secret/Q clearance.
• Industry recognized certifications.

Where it’s done:

• Remote (Herndon, VA).