Security Engineer - GRC & Compliance

Job Title: Security Engineer -  GRC & Compliance
Location: Austin, TX (Hybrid)
Client: State Of Texas
JD:
Key Responsibilities:

Own end-to-end development, maintenance, and updates of SSP/SSPPs for enterprise systems
Manage POA&Ms, driving timely remediation and closure of compliance gaps
Translate penetration testing and vulnerability findings into actionable remediation items
Coordinate remediation validation with application, infrastructure, and security teams
Oversee risk-based vulnerability management and SLA-driven remediation
Produce assessor-ready audit documentation, evidence, and approvals
Support continuous audit readiness and reduce repeat audit findings

Qualifications:
10+ years of experience in GRC, enterprise security, and compliance frameworks
Deep expertise in SSP development, POA&M management, and audit evidence validation
Strong knowledge of NIST 800-53, NIST RMF, cloud security, and DevSecOps practice
Proven ability to communicate complex security risks to technical and executive stakeholders
please share resumes to