CMMC & GRC IT Project Lead for Shield Expansion

Georgia Institute of Technology; Atlanta (GA); On-site; USD 112,000 - 130,000; Full time

Job summary

Georgia Tech's Office of Information Technology (OIT) is seeking a seasoned program manager with Governance, Risk, and Compliance (GRC) expertise to oversee CMMC-compliant onboarding of researchers and laboratories to the Shield secure research service and provide operational support to Shield-based work.

The role requires deep experience with CMMC, NIST SP 800-171, and building programs in complex regulated environments, serving as a trusted advisor to cybersecurity leadership and institutional

Qualifications

• Bachelor's degree or an equivalent combination of education and experience.
• 10+ years of cybersecurity, governance, risk management, compliance, audit, or related discipline.
• Deep GRC expertise including controls, risks, testing approaches, and evidence standards.
• Strong program management instincts and ability to drive cross‑functional collaboration.
• Proven ability to communicate clearly with senior leaders, auditors, and stakeholders.

Responsibilities

• Lead project teams through planning, execution, and budgeting across multiple initiatives.
• Oversee governance, risk, and compliance activities to maintain CMMC/NIST 800-171 alignment.
• Engage researchers and translate requirements into compliant Shield solutions.
• Shape expansion of Shield across the Georgia Tech research enterprise.
• Provide strategic risk guidance to cybersecurity leadership and institutional partners.

Skills

GRC expertise

Program management

Cybersecurity

Regulated environments

Stakeholder communication

Education

Bachelor's Degree

Job description

Georgia Tech's Office of Information Technology (OIT) is seeking a seasoned program manager with Governance, Risk, and Compliance (GRC) expertise to oversee CMMC-compliant onboarding of researchers and laboratories to the Shield secure research service and provide operational support to Shield-based work.

The role requires deep experience with CMMC, NIST SP 800-171, and building programs in complex regulated environments, serving as a trusted advisor to cybersecurity leadership and institutional