Remote job
Governance, Risk & Compliance (GRC) Manager
Job details
About this role
Role overview Lead and mature governance, risk, and compliance programs for a national construction services organization with a significant regulated footprint. This remote role owns CMMC Level 2 readiness, SOC audits, and SOX IT General Controls (ITGC), partnering across technology, business, and executive stakeholders to keep controls aligned with regulatory, contractual, and business requirements.
Responsibilities - Serve as the primary owner of cybersecurity compliance initiatives, including CMMC Level 2 readiness - Manage SOC 1 and/or SOC 2 audits end-to-end with external assessors and auditors - Support SOX IT General Controls testing, documentation, and remediation - Conduct risk assessments, compliance gap analyses, and remediation planning - Develop and maintain security policies, standards, and governance documentation - Engage with auditors, regulators, and business stakeholders on the organization's compliance posture
Requirements - 10+ years in GRC, Information Security, Risk Management, or related cybersecurity roles - 3+ years in leadership, management, or program ownership - Direct experience leading or supporting CMMC Level 2 compliance programs - Hands-on experience managing SOC 1 and/or SOC 2 audits - Experience supporting SOX compliance and ITGC testing and remediation - Strong command of NIST SP 800-171 and broader cybersecurity control frameworks
Nice to have - Certifications such as CISSP, CISM, CRISC, CISA, CIA, or CGRC - Background in the Defense Industrial Base or another regulated environment
Benefits and work setup - Primarily remote work with regular virtual collaboration using standard business applications - Occasional travel for company meetings, training, or project needs - Medical, dental, and vision insurance - 401(k) retirement plan with company match - Paid time off and holiday pay - Life and disability insurance - Professional development and training opportunities - Employee assistance program (EAP) - Colorado pay range listed at $165,000—$165,000 USD