workato
Senior GRC Analyst
At a Glance
- Location
- Palo Alto, California, United States
- Experience
- 8+ years
- Compensation
- for this role may range from $120,000 to $145,000, plus variable compensation, b
- Posted
- 2026-05-20T21:35:44-04:00
Key Requirements
Required Skills
Certifications
- ISO
Domain Knowledge
- Automation
- Cybersecurity
- Engineering
- Government
- Regulatory
Requirements
Identify control gaps and recommend improvements to enhance the organization's federal security posture
Communicate FedRAMP requirements, risks, and compliance status clearly to both technical and non-technical stakeholders, including federal agency customers
Develop and track remediation plans for identified risks and POA&M items
Oversee vendor and subservice provider security assurance processes relevant to the FedRAMP authorization boundary
Collaborate with engineering, infrastructure, and product teams to design and implement controls aligned with NIST 800-53 baselines
Support federal-facing sales and customer success discussions with compliance expertise
Compensation & Benefits
Ultimately, Workato believes in fostering a
flexible, trust-oriented culture that empowers everyone to take full ownership of their roles
. We are driven by
innovation
and looking for
team players
Responsibilities
Workato is seeking a detail-oriented, driven, and technically experienced Senior GRC Analyst to strengthen and advance its security governance, risk, and compliance (GRC) program — with a primary focus on FedRAMP authorization and ongoing federal compliance operations.
This role will lead FedRAMP readiness, authorization, and continuous monitoring activities in alignment with NIST 800-53 requirements, while also supporting broader compliance frameworks including ISO 27001, NIST 800-171, PCI-DSS, and IRAP.
ou will also be responsible for:
Leading FedRAMP authorization efforts
— including System Security Plan (SSP) development, Security Assessment Report (SAR) review, Plan of Action & Milestones (POA&M) management, and preparation for Third Party Assessment Organization (3PAO) engagements
Owning continuous monitoring (ConMon)
About the Company
Workato delivers enterprise infrastructure for the agentic era, redefining iPaaS and helping enterprises unify data, applications, processes, and AI into a single, governed platform. A leader in Enterprise MCP and trusted by 50% of the Fortune 500, Workato’s cloud-native architecture connects every application, data source, and process to power real-time orchestration at scale. With enterprise-grade security and continuous innovation at its core, Workato provides the trusted foundation for organizations to automate with confidence and operationalize AI across the business. To learn more, visit
www.workato.com
But, we also believe in
balancing productivity with self-care