GRC Manager

Job Summary

Owning and modernizing the governance, risk, and compliance program across federal and commercial markets, the full-time GRC Manager will lead compliance initiatives, manage risk programs, and drive automation efforts while working remotely.

Key responsibilities

• Own and modernize compliance programs for federal and commercial markets
• Lead readiness, certification, and surveillance cycles for compliance initiatives
• Operate the risk management program from identification through treatment and acceptance

Required qualifications

• Bachelor's degree in computer science, information security, or related field, or significant professional GRC experience
• Proven senior-level experience in governance, risk, and compliance, including ownership of a certification program
• Experience with U.S. Federal standards such as CMMC and NIST (800-171 / 800-53)
• Experience with ISO 27001 and SOC 2 Type II compliance
• Experience managing third-party and vendor risk management programs