"Alerted.org

Incident Management/Governance Risk Compliance Engineer

Posted: 08/29/2025

Electrosoft Services, Inc. is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, enterprise IT modernization, and software solutions. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more. If we’ve described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.

Incident Management/Governance Risk Compliance Engineer

+ Support the Administration, Operations and Maintenance (O&M), Environmental Management, and Troubleshooting of the department-wide interconnected instances of the enterprise GRC platform and application, currently RSA Archer.

+ Partner with Security and Infrastructure teams to maintain system availability.

+ Support an enterprise GRC platform and application to accommodate business requirements and/or design changes.

+ Troubleshoot data feed integration, stakeholder notifications, and reporting requirements.

+ Provide extensive knowledge of enterprise GRC platforms and applications including RSA Archer. Train enterprise GRC platform and application users on the use of the tool as appropriate. Support enterprise GRC platform and application users to understand and navigate the process and terminology.

+ Manage and maintain enterprise GRC platform and application user accounts.

+ Perform bulk user upload and single user account creation.

+ Provide enterprise GRC platform and application users with technical support.

+ Transfer data to other applications for reporting purposes. Export/Import privacy data into an enterprise GRC platform and application ingestible templates. Integrate other software/applications with an enterprise GRC platform and application.

+ Assist OpDivs and system users on how to perform the process of data import into an enterprise GRC platform and application including RSA Archer and exporting meaningful reports to management stakeholders. Assist in validating data fields for use in the import process.

+ Supports Database Administrators in designing, implementing, and testing database changes to support business applications. This includes but is not limited to assisting Database Administrators code efficient SQL statements, review the SQL statements for performance and make recommendations for indexes. Or assisting with the designing and planning of upgrade strategies in concert with system administrators and database administrators. Upgrade plans must include checklist, milestones, complete checkout, and exercised fallback procedures.

+ Maintain detailed documentation for system designs, configurations, processes, and service records.

+ Collaborate with cross-functional teams to support IT infrastructure projects, providing expert guidance and technical leadership.

+ Lead and mentor junior team members in best practices and technical challenges. Analyzes development and implementation requirements and makes appropriate modifications to existing systems and prepares specifications based on customer requests.

Basic Qualifications

+ Candidate will hold a ComSci/CIS/InfoSec/IT related bachelor’s degree (or higher) with ~8+ years of Information Security work experience or an equivalent combination of education, certifications, & IT experience.

+ Candidate will possess knowledge, proficiency, and/or familiarity with performing the following database administration tasks: Performance tuning, Database, and Data Maintenance.

+ Ability to participate in a 24/7/365 on call rotation.

+ Organized, detail-oriented, and excellent problem-solving skills with the ability to work independently or as part of a team.

+ Capability to troubleshoot and resolve LAN/WAN connections, performance/throughput issues, and other related network problems.

+ Strong communication and documentation skills, with the ability to explain complex technical concepts to non-technical stakeholders.

+ Possess knowledge &/or familiarity with security hardening framework standards and regulations from Center for Internet Security (CIS) Control 4, National Institute of Standards and Technology (NIST) Special Publication 800-53 Revision 5, and Defense Information Systems Agency’s (DISA) Security Technical Implementation Guides (STIGs).

All qualified applicants are considered for employment, and employees are treated during employment without regard to race, color, religion, sex, national origin, age, citizenship, disability, or Veteran status. Additionally, the company provides reasonable accommodations to qualified individuals with disabilities.