The GRC RegScale Administrator is responsible for the configuration, maintenance, and lifecycle support of the RegScale platform. This role manages system migrations, RMF workflows, and technical integrations to ensure compliance with federal mandates.
About the role
The GRC RegScale Administrator is responsible for the administration, configuration, optimization, and lifecycle support of the organization’s RegScale GRC platform. This role provides hands-on technical and functional support for Governance, Risk, and Compliance (GRC) operations, including system migrations, data integrity management, RMF workflows, integrations, and audit readiness. The Administrator serves as a key technical liaison between cybersecurity, compliance, IT operations, and system owners to ensure GRC processes are scalable, secure, and aligned with federal mandates and government policies.
What you'll do
- Administer, configure, and maintain the RegScale GRC platform across production, staging, and development environments.
- Support releases, upgrades, patches, regression testing, rollback planning, and post-deployment validation.
- Ensure platform health, audit logging, access controls, and configuration baselines.
- Configure and maintain RMF workflows, POA&Ms, risk acceptance, and authorization packages.
- Maintain SSPs, FISMA artifacts, and continuous monitoring documentation.
- Support ATO, reauthorization, and audit readiness activities.
- Support migrations from legacy GRC platforms, spreadsheets, or manual tracking solutions into RegScale.
- Perform data mapping, normalization, cleansing, validation, and reconciliation.
- Develop migration runbooks, cutover strategies, rollback plans, and post-migration validation.
- Coordinate migration activities with system owners, ISSOs, auditors, and vendors.
- Develop and maintain integrations with SIEM, asset management, vulnerability scanning, IAM, and cloud platforms (AWS, Azure, GCP).
- Implement APIs and automated data feeds to synchronize compliance and risk data.
Qualifications
- Minimum five (5) years of experience in listed tasks
- Bachelor’s degree
- Experience administering multiple GRC platforms including RegScale and CSAM.
- Experience supporting RMF authorization, ATO, and continuous monitoring.
- Demonstrated experience supporting GRC system migrations or platform enhancements.
- Strong knowledge of NIST RMF, NIST SP 800-53 Rev. 5, and FISMA.
- Familiarity with AWS, Azure, and GCP compliance tooling.
- Experience with APIs, integrations, and compliance automation.
- Dtrong documentation, collaboration, and communication skills.