Cybersecurity GRC Manager—CMMC & AI Governance

Genpact Ltd.; United States; On-site; USD 120,000 - 190,000; Full time

Job summary

Genpact Ltd. is seeking a seasoned Manager of Cybersecurity GRC to lead governance, risk, and compliance engagements for federal and government sector clients.

You will shape evidence artifacts, control mappings, and crosswalks across CSF 2.0, NIST, and ISO standards while guiding AI governance initiatives and data privacy programs. You will collaborate with cross-functional teams to drive readiness for audits and certifications, and influence leadership with clear risk insights.

Qualifications

• 8-12 years of experience in Cyber Security GRC, Information Security Risk Management, Data Privacy, and Technology Audit.
• Hands-on CMMC 2.0 (Level 2) readiness experience for federal/government sector clients.
• Experience building/maintaining audit-ready evidence (SSP/POA&M) and crosswalks to ISO 27001/42001.
• Experience implementing or managing enterprise GRC platforms.
• Knowledge of risk management frameworks, Cyber Security Risk Assessments, Threat Modelling and control testing.
• Knowledge of AI governance and security, including risks in AI/ML models and data pipelines.
• Experience with data privacy programs and regulations (GDPR, CCPA, etc.).
• Ability to author/manage information security policies, standards, and procedures.

Responsibilities

• Lead cybersecurity compliance and assessment readiness activities for federal and government sector client engagements, including CMMC readiness where applicable.
• Build, maintain, and curate audit-ready evidence artifacts and documentation (SSP, POA&M, control/evidence checklists).
• Develop and maintain control definitions, mappings, and evidence requirements for consistent testing and evidence reuse.
• Create/crosswalk mappings across CMMC Level 2, NIST CSF 1.x→2.0, NIST SP 800-171, and ISO 27001/ISO 42001.
• Identify gaps and document remediation options and actions to meet applicable federal cyber requirements.
• Facilitate assessment readiness activities, including Q&A sessions and evidence walkthroughs for assessors.
• Support CSF 1.x to 2.0 transitions by producing crosswalks and defining a CSF 2.0 target profile.
• Collaborate with GRC, security, and tech stakeholders to validate scope, control applicability, and evidence availability.

Job description

Genpact Ltd. is seeking a seasoned Manager of Cybersecurity GRC to lead governance, risk, and compliance engagements for federal and government sector clients.

You will shape evidence artifacts, control mappings, and crosswalks across CSF 2.0, NIST, and ISO standards while guiding AI governance initiatives and data privacy programs. You will collaborate with cross-functional teams to drive readiness for audits and certifications, and influence leadership with clear risk insights.