Cloud Security GRC Consultant

Dark Wolf’s Google Cloud Security Governance, Risk, and Compliance (GRC) Consultants are innovative security professionals responsible for applying federal security frameworks (such as  the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) and  Federal Risk and Authorization Management Program (FedRAMP)) to modern, complex Google Cloud environments. We are looking for tech-forward consultants who want to move beyond checklist compliance. This role requires a solid understanding of Google Cloud services and the ability to bridge the gap between engineering and security. The ideal candidate will help navigate the Assessment & Authorization (A&A) lifecycle, partnering directly with cloud architects to integrate compliance into system design and translating complex cloud architecture into verifiable evidence to achieve an Authorization to Operate (ATO).

Responsibilities:

Responsibilities:

• Work collaboratively within a fast paced Agile team environment
• Stay up-to-date on the latest Google Cloud services and technologies
• Implement security best practices for Google Cloud solutions
• Serve as a key contributor for federal compliance requirements, including FedRAMP, NIST SP 800-53, and agency-specific security overlays
• Support development and implementation of innovative methods to achieve compliance with government and commercial cybersecurity frameworks
• Conduct detailed technical security control assessments against system components and configurations within the GCP environment, identifying gaps, risks, and recommended mitigations
• Actively contribute to the development and finalization of authorization artifacts
• Partner with cloud architecture and engineering teams to provide actionable compliance guidance, ensuring security is built-in from system design through deployment
• Utilize Google Cloud native tools and features to aid in continuous monitoring (ConMon) activities, vulnerability management, and security posture management
• Support reviews with the Authorizing Official (AO), security assessors (e.g., 3PAOs), and federal agency security teams during control assessments and authorization reviews
• Develop clear, compelling Plan of Action and Milestones (POA&M) entries, helping the team communicate system risks, impact, and mitigation strategies to stakeholders
• Support strategic consulting efforts on evolving federal cloud security policy and best practices

Qualifications:

• 2+ years of relevant experience
• At least one Google Cloud Professional Certification