CMMC & GRC Program Manager: Shield Expansion Lead

Georgia Institute of Technology; Seattle (WA); On-site; USD 112,000 - 130,000; Full time

Job summary

Georgia Tech's Office of Information Technology seeks a seasoned program manager with Governance, Risk, and Compliance (GRC) expertise to oversee CMMC-compliant onboarding of researchers and laboratories to the Shield service, and to provide ongoing operational support.

The role requires deep CMMC/NIST SP 800-171 experience, the ability to advise cybersecurity leadership, and the vision to expand Shield across the Georgia Tech research enterprise, including labs and HPC environments.

Qualifications

• Bachelor's degree or equivalent combination of education and experience.
• 10+ years of experience in cybersecurity, governance, risk management, compliance, audit, technology risk, or a related discipline.
• Deep GRC expertise, including controls, risks, testing approaches, evidence standards, control mapping, issue management, risk registers, POA&Ms, policy governance, vendor risk, and continuous monitoring – with a focus on NIST SP 800-171 and CMMC.
• Strong analytical and detail-oriented skills, including precise control wording, accurate requirement mapping, evidence specificity, issue documentation, and comfort working with spreadsheets and large data sets.
• Strong program management instincts, including the ability to define process, structure ambiguity, drive prioritization, track execution, and foster cross-functional collaboration.
• Demonstrated ability to communicate clearly and persuasively with senior leaders, technical teams, auditors, business stakeholders, and institutional partners.

Responsibilities

• Lead project teams through planning and oversight of diverse activities; define project goals, objectives, scope and estimates of schedules, resources and costs involving multiple projects.
• Direct project execution through continual coordination of planning, tasking, performance reporting, change control and issue management.
• Confer with functional users within an assigned business or service area to develop plans to address business needs; develop and implement change management strategies.
• Initiate communications among project teams, customers and appropriate levels of management.
• Deliver project status reports and presentations.
• Develop and manage project budgets.
• Manage acquisition of project related goods and contract services.
• Provide mentoring, training and career guidance for team members.
• Perform other duties as assigned.

Skills

GRC expertise

CMMC experience

NIST SP 800-171

Program management

Regulated environments

Education

Bachelor's Degree or an equivalent combination of education and experience

Job description

Georgia Tech's Office of Information Technology seeks a seasoned program manager with Governance, Risk, and Compliance (GRC) expertise to oversee CMMC-compliant onboarding of researchers and laboratories to the Shield service, and to provide ongoing operational support.

The role requires deep CMMC/NIST SP 800-171 experience, the ability to advise cybersecurity leadership, and the vision to expand Shield across the Georgia Tech research enterprise, including labs and HPC environments.