GRC Manager

Job Summary

Hands-on and operationally focused, the full-time remote Manager of Governance, Risk and Compliance (GRC) will lead compliance initiatives, manage day-to-day GRC operations, and enhance security governance across the organization.

Key responsibilities

• Own and manage GRC and compliance operations, including audit coordination and policy maintenance
• Conduct enterprise risk assessments and manage third-party/vendor risk management activities
• Collaborate cross-functionally to ensure alignment on security and regulatory requirements

Required qualifications

• 6+ years of experience in Governance, Risk, and Compliance (GRC) or related fields
• Hands-on experience with compliance frameworks such as SOC 2, ISO 27001, NIST, and CMMC 2.0
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Business, or related field
• Experience leading audits and managing evidence collection and remediation activities
• Familiarity with cloud security concepts and governance within AWS or similar environments