GRC Manager

About This Opportunity

We are representing a confidential software organization in a search for a GRC Manager to own and modernize their governance, risk, and compliance program across federal and commercial markets.

This is a program-ownership role for someone who brings a modern, engineering-led approach to compliance—harnessing GRC engineering and AI to reduce manual effort and scale programs. You will own the compliance posture end to end, accountable for federal readiness and commercial certifications, and you will modernize how they run: automated, continuously monitored, and AI-native.

You will do the hands-on compliance work while coordinating across internal stakeholders in engineering, infrastructure, and IT who implement controls, the external auditors who assess them, and the customers whose trust rests on the outcome. As the program scales, you will grow and lead the team behind it.

Responsibilities

• Own and modernize compliance programs across federal and commercial markets
• Lead readiness, certification, and surveillance cycles across both programs
• Operate the risk management program end to end—from identification and assessment through treatment and acceptance
• Own the third-party and vendor risk management program, including security assessments and supply chain risk
• Apply GRC engineering and automation to replace manual evidence collection with continuous controls monitoring
• Build AI-native workflows to accelerate and improve the quality of recurring compliance work
• Maintain the control library, system security plans, POA&Ms, and policies
• Coordinate external audits from scoping through remediation
• Accelerate deal cycles by owning customer security questionnaires, trust center content, and reusable compliance artifacts
• Grow and lead the GRC team as the program scales

What We're Looking For

Required Qualifications:

• Bachelor's degree in computer science, information security, or related field—or significant professional GRC and compliance experience
• Proven senior-level experience in governance, risk, and compliance, security compliance, or IT audit, including direct ownership of a certification or authorization program
• Experience with U.S. Federal standards including CMMC and NIST series (800-171 / 800-53)
• Experience with ISO 27001 and SOC 2 Type II
• Experience operating a formal risk management program
• Experience running a third-party and vendor risk management program
• Experience owning customer-facing security assurance, including security questionnaires and trust center content
• Working knowledge of security controls for cloud environments (AWS, GCP, and/or Azure)
• Excellent written and verbal communication skills
• U.S. citizenship required—candidates must be located in the United States and eligible to obtain and maintain a U.S. government security clearance
• Must meet eligibility requirements for access to export-controlled information as defined by U.S. export control laws, including EAR and ITAR

Preferred Qualifications:

• Professional GRC certifications such as CISA, CRISC, CISM, CISSP, or CIPP
• Experience working with AI platforms such as Claude, OpenAI, or Gemini
• Experience with compliance automation tooling such as Vanta or Drata, and continuous controls monitoring
• Direct experience applying AI or LLM-based workflows to GRC tasks
• Proficiency in no-code automation or scripting languages
• Past success in critical infrastructure industries including defense, cybersecurity, communications, or manufacturing

How We Work With You

When you apply through Get A Job.ai, our talent team will screen your qualifications and coordinate your introduction to our client. We manage the process from initial application through offer negotiation. Please do not contact the client directly—all communication flows through our recruiting team to ensure a professional, coordinated experience.

Pay

Pay via Get A Job.ai: $139,254–$168,318 USD. Actual compensation may vary based on location, skills, experience, qualifications, and market conditions.

Location: Remote within the United States

Equal Employment Opportunity

Get A Job.ai is committed to equal employment opportunity. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic.