Cybersecurity Program/Project Manager – Governance, Risk, & Compliance (GRC)

Talantir; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

401K safe harbor plan with employer 
|

Health insurance

10 paid holidays

15 days of personal time off

Commuter benefits

Tuition assistance

and more

Job summary

Talantir is seeking an experienced Cybersecurity Program/Project Manager to lead enterprise GRC initiatives, aligning security risk programs with business objectives. You will drive governance, risk, and compliance across a shared services model, coordinating with multiple business units and executives to ensure timely delivery.

The role requires PMP (or equivalent), 5+ years managing complex cybersecurity programs, and deep knowledge of NIST CSF, 800-53, ISO 27001.

Qualifications

• Bachelor's degree in cybersecurity, information systems, business, or related field.
• PMP certification, Masters, or equivalent.
• 5+ years managing complex cybersecurity programs or projects.
• 5+ years leading GRC, risk, or compliance in an enterprise environment.
• Strong knowledge of security frameworks such as NIST CSF, NIST 800-53, ISO 27001, COBIT.
• Experience with GRC tools like CSAM, Xacta, Archer, ServiceNow GRC.

Responsibilities

• Lead GRC program delivery across a shared services model.
• Ensure regulatory/industry standards compliance (NIST, ISO 27001, FedRAMP, HIPAA, SOC 2).
• Manage governance frameworks, security policies, control testing, risk assessments.
• Coordinate with cross-functional teams to remediate findings and report posture.
• Serve as primary contact for audits, assessments, and executive updates.
• Develop program plans, risk registers, and dashboards for leadership.
• Promote continuous improvement of GRC processes and tooling.

Skills

GRC

Stakeholder management

Executive reporting

Program management

Communication

Education

Bachelor's degree in Cybersecurity/Information Systems/Business

PMP or equivalent

Master's degree

Tools

CSAM

Xacta

Archer

ServiceNow GRC

Job description

We are seeking an experienced Cybersecurity Program/Project Manager to lead and coordinate our Governance, Risk, and Compliance (GRC) shared service initiatives. This is a strategic role that requires both a deep understanding of cybersecurity risk management and expert-level program management skills. You will drive enterprise-wide GRC efforts and ensure the successful delivery of security compliance and risk programs aligned with industry frameworks and business objectives.

Key Responsibilities

• Lead GRC program delivery across a shared services model, serving multiple internal business units and stakeholders.
• Ensure compliance with regulatory and industry standards (e.g., NIST, ISO 27001, FedRAMP, HIPAA, SOC 2).
• Manage and mature governance frameworks, security policies, control testing activities, and risk assessments.
• Coordinate with cross-functional teams to remediate findings, track risk mitigation efforts, and report compliance posture.
• Serve as the primary point of contact for cybersecurity audits, assessments, and executive updates.
• Develop program plans, schedules, risk registers, and performance dashboards for leadership and oversight.
• Promote continuous improvement of GRC processes, tooling, and documentation.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Business, or a related field.
• Project Management Professional (PMP) certification, Masters, or equivalent
• 5+ years of experience managing complex cybersecurity programs or projects.
• 5+ years of experience leading GRC, risk, or compliance functions within an enterprise environment.
• Strong working knowledge of security frameworks and standards such as NIST CSF, NIST 800-53, ISO 27001, and COBIT.
• Experience with GRC tools (e.g., CSAM, Xacta, Archer, ServiceNow GRC, etc).
• Excellent communication, stakeholder management, and executive reporting skills.

Preferred Qualifications

• Additional certifications such as CISSP, CISM, CRISC, CGEIT.
• Experience operating in a shared services model or large-scale enterprise environment.
• Familiarity with cloud security compliance frameworks (FedRAMP, ISO 27017/18, AWS/GCP/Azure controls).

Bonus Experience

• Experience in converting wireframes and graphic designs into effective web interfaces.
• Background in UX research, testing, and front-end graphic design.
• Government or DOJ cybersecurity experience, particularly FISMA A&A accreditation.
• Sense of Humor

Why Join Us

• Take ownership of enterprise-level GRC initiatives that impact organizational security posture.
• Work in a collaborative, growth-oriented cybersecurity team.
• Enjoy a flexible, inclusive work environment with room for advancement.
• Competitive salary, benefits, and professional development support.

Benefits

• 401K safe harbor plan with employer match
• 10 paid holidays
• 15 days of personal time off
• health insurance
• commuter benefits
• tuition assistance
• and more.

Job Type: Full-time

Schedule

• 8 hour shift
• Monday to Friday

Security clearance

• Secret (Required)

Work Location

• Remote