Director of Governance, Risk & Compliance

📋 Description

• Own and mature the internal GRC program and lead the operational delivery of Managed GRC services
• Lead risk assessments, control assessments, compliance readiness activities, policy governance
• Lead federal compliance activities, including the development and maintenance of System Security
• Coordinate with engineers, security teams, control owners, and clients to validate how security
• Support requirements related to NIST SP 800-53, NIST SP 800-171, FISMA, CMMC, FedRAMP concepts, and
• Manage cybersecurity risk and compliance programs covering risk registers, control gaps, treatment

🎯 Requirements

• 8+ years of experience in cybersecurity, Governance, Risk & Compliance, security assessment
• Hands-on experience with NIST SP 800-53, System Security Plans, POA&Ms, control implementation
• Proven experience managing audits, evidence programs, risk assessments, control gaps, policies
• Ability to translate regulatory and compliance requirements into practical technical and
• Strong understanding of frameworks and standards such as SOC 2, NIST, CIS, ISO 27001, PCI DSS
• Strong client-facing, executive communication, facilitation, and stakeholder management skills

🎁 Benefits

• Competitive salary based on experience and skills.
• Performance-based compensation with bonus potential in addition to base salary.
• 401(k) plan with a 100% employer match on employee contributions up to 4% of salary.
• 100% employer-paid health, vision, and dental insurance premiums for employees.
• Company-paid life, AD&D, short-term disability, and long-term disability insurance.
• Three weeks of paid time off that can be used for vacation, personal time, or sick leave.