• Create and maintain core FedRAMP security artifacts (SSP, POA&M, checklists/templates); develop Significant Change Request documentation and support related assessments • Apply FedRAMP, NIST SP 800 53, and NIST SP 800 37 RMF to cloud environments; support control implementation and evidence • Support monthly/annual FedRAMP continuous monitoring; assist with vulnerability identification/mitigation and POA&M tracking; monitor and maintain in scope asset inventory • Manage and support audit engagements (SOC 2, ISO 27001, C5, SOX, PCI DSS, HIPAA) • Assist with vendor risk management activities: intake, due diligence assessments, risk rating, contract/security terms review, remediation tracking, and periodic reviews • Drive GRC process automation to streamline evidence collection, control testing, workflows, and reporting using the GRC platform and integrations • Respond to customer security questionnaires, RFPs, and due diligence requests; Coordinate evidence and liaise with SMEs, assessors, and customers • Manage the control and process libraries; assist the business in implementing internal controls; document, assess, and remediate issues from audits and risk assessments • Contribute to meetings by preparing agendas, documenting minutes, and tracking follow up actions; assist with management of Sprinklr security standards/policies and maintain GRC repositories (Confluence, shared drives)