Technical Writer - GRC, Compliance & Product Documentation

About

We are seeking a detail-oriented Technical Writer with expertise in Information Security Governance, Risk, and Compliance (GRC) to lead the development of high-quality documentation across customer-facing, product, and compliance domains.

This role combines technical writing, RFP response development, product documentation, and compliance support. The ideal candidate excels at translating complex technical, security, and product concepts into clear, accurate, and user-friendly content. You will play a critical role in supporting sales efforts, audit readiness, and product adoption.

This is a hands-on position requiring strong writing, analytical, cybersecurity, IT, and project management skills, along with the ability to manage multiple priorities and deliver under tight deadlines with minimal supervision.

Key Responsibilities

Technical Writing, RFP & Customer Assurance (Primary Focus)

• Lead written responses to RFPs, RFIs, and cybersecurity questionnaires, including DoD-related requests
• Translate security controls, policies, and compliance frameworks into clear, concise, and customer-friendly language
• Develop and maintain reusable response libraries, templates, and knowledge bases
• Ensure consistency and accuracy across all external-facing documentation
• Collaborate with Sales, IT, Product, and Professional Services teams to gather inputs and validate responses
• Edit and refine SME contributions into polished deliverables
• Manage multiple deadlines and deliver high-quality submissions under tight timelines

Product & Technical Documentation

• Install, test, and document RFgen products including key features and functionality
• Interview SMEs to gather technical details and use cases for product features
• Create clear, user-focused documentation for internal and external audiences
• Develop and publish online help content using MadCap Flare, including graphics and screen captures
• Produce user guides, installation guides, and reference manuals using single-source publishing
• Write and maintain release notes, knowledge base articles, and technical updates; publish to platforms such as Salesforce Knowledge and company websites
• Create business process documentation, including workflows and diagrams
• Collaborate with Product, Services, Training, and Marketing to support product communication and “What’s New” content

GRC Platform Administration

• Administer and manage the GRC platform
• Maintain automated evidence collection, integrations, and control monitoring
• Ensure all controls, tests, and artifacts are current and audit-ready
• Leverage the GRC platform to support audit readiness and RFP response accuracy

Compliance & Audit Execution

• Support SOC 2 Type II and CMMC 2.0 audits, including documentation, evidence collection, and walkthroughs
• Maintain accounts in PIEE, SPURS, and SAM.gov
• Coordinate with external auditors and C3PAOs
• Maintain continuous audit readiness
• Track and support remediation of audit findings

Control Management & Governance

• Implement and maintain controls aligned with SOC 2, NIST SP 800-171, and CMMC 2.0
• Write and maintain governance policies, standards, procedures, and supporting documentation
• Perform control testing and validation
• Maintain control mappings across frameworks

Risk & Third-Party Support

• Support risk assessments and maintain the risk register
• Document and communicate risk findings clearly to stakeholders
• Assist with vendor security reviews and third-party risk assessments

Cross-Functional Collaboration

• Work closely with Sales, IT Security, Development, Product, Training, Marketing, and Professional Services teams
• Communicate technical and compliance concepts clearly to both technical and non-technical audiences
• Support training and customer-facing initiatives with documentation and visuals
• Participate in customer discussions to understand product usage and challenges

Requirements

Required Qualifications

• 3+ years in technical writing, information security, compliance, or GRC
• Experience writing RFP responses, security questionnaires, and technical documentation
• Hands-on experience supporting SOC 2 Type II audits
• Strong knowledge of CMMC 2.0 and NIST SP 800-171
• Excellent writing, editing, and document structuring skills
• Experience working with auditors and managing audit documentation

Preferred / Helpful Skills

• Experience with MadCap Flare or similar documentation tools
• Experience administering Drata or similar GRC platforms
• Background in IT, networking, or security operations
• Experience with DoD, federal, or defense-related environments
• Familiarity with CUI (Controlled Unclassified Information), FCI, and CMMC standards
• Experience using AI tools for content generation or standardization

Key Traits

• Strong technical writer who can translate complex concepts into clear business and user language
• Highly detail-oriented and process-driven
• Able to work under tight deadlines and competing priorities
• Organized and capable of managing multiple workstreams

Education

• Bachelor’s degree in relevant fields such as Technical Writing, Business, Risk Management, Compliance, Information Security, or a related field (or equivalent practical experience)

Compensation & Benefits

RFgen offers a competitive compensation and benefits package designed to address the diverse needs of our employees, such as:

• Competitive Salaries
• Annual Discretionary Bonus
• Medical, Dental, and Vision Coverage
• 401(k) and Profit-Sharing
• Paid Holidays
• Generous Paid Time Off (PTO) Plans
• Holiday Parties.

If you’re ready to design enterprise-grade mobility solutions that transform warehouse and manufacturing operations—while playing a strategic role in shaping customer success—we invite you to join RFgen.