About the roleThe GRC RegScale Administrator is responsible for the administration, configuration, optimization, and lifecycle support of the organization's RegScale GRC platform. This role provides hands-on technical and functional support for Governance, Risk, and Compliance (GRC) operations, including system migrations, data integrity management, RMF workflows, integrations, and audit readiness. The Administrator serves as a key technical liaison between cybersecurity, compliance, IT operations, and system owners to ensure GRC processes are scalable, secure, and aligned with federal mandates and government policies.
What you'll do- Administer, configure, and maintain the RegScale GRC platform across production, staging, and development environments.
- Support releases, upgrades, patches, regression testing, rollback planning, and post-deployment validation.
- Ensure platform health, audit logging, access controls, and configuration baselines.
- Configure and maintain RMF workflows, POA&Ms, risk acceptance, and authorization packages.
- Maintain SSPs, FISMA artifacts, and continuous monitoring documentation.
- Support ATO, reauthorization, and audit readiness activities.
- Support migrations from legacy GRC platforms, spreadsheets, or manual tracking solutions into RegScale.
- Perform data mapping, normalization, cleansing, validation, and reconciliation.
- Develop migration runbooks, cutover strategies, rollback plans, and post-migration validation.
- Coordinate migration activities with system owners, ISSOs, auditors, and vendors.
- Develop and maintain integrations with SIEM, asset management, vulnerability scanning, IAM, and cloud platforms (AWS, Azure, GCP).
- Implement APIs and automated data feeds to synchronize compliance and risk data.
Qualifications- Minimum five (5) years of experience in listed tasks
- Bachelor's degree
- Experience administering multiple GRC platforms including RegScale and CSAM.
- Experience supporting RMF authorization, ATO, and continuous monitoring.
- Demonstrated experience supporting GRC system migrations or platform enhancements.
- Strong knowledge of NIST RMF, NIST SP 800-53 Rev. 5, and FISMA.
- Familiarity with AWS, Azure, and GCP compliance tooling.
- Experience with APIs, integrations, and compliance automation.
- Dtrong documentation, collaboration, and communication skills.
