Governance, Risk & Compliance (GRC) Manager

Loenbro

Oregon

Hybrid

USD 149,000 - 182,000

Full time

6 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan with company |

Paid time off (PTO) and holiday pay

Life and disability insurance

Professional development and training

Employee assistance program (EAP)

Job summary

Loenbro is seeking a Governance, Risk & Compliance Manager to lead and mature the organization's GRC, cyber risk, and audit programs. This hands‑on role centers on CMMC Level 2, SOC audits, and IT General Controls, partnering with business, technology, and executive stakeholders to ensure controls and policies meet regulatory, contractual, and risk requirements while supporting audit readiness.

You bring 10+ years in GRC or information security, 3+ years in leadership, and direct CMMC Level 2

Qualifications

10+ years in GRC or cybersecurity roles.
3+ years in leadership or program ownership.
Direct experience with CMMC Level 2, SOC 1/2, and ITGC testing.
Strong knowledge of NIST SP 800-171 and control frameworks.
Experience working with external auditors and regulatory bodies.
Excellent communication and project management skills.
Preferred: CISSP, CISM, CRISC, CISA, CIA, or CGRC.
Experience in DIB or regulated environments preferred.

Responsibilities

Lead and mature the GRC program across the company.
Own CMMC Level 2, SOC audits, and ITGC activities.
Collaborate with business, IT, and executive stakeholders.
Ensure policies and controls meet regulatory and contractual requirements.
Maintain audit readiness and remediation tracking.
Hands-on implementation and operation of security controls.

Skills

GRC management

Cybersecurity governance

Audit coordination

CMMC Level 2

SOC audits

SOX ITGC

NIST SP 800-171

Risk assessment

Policy development

Stakeholder management

Communication skills

Job description

Job Title: Governance, Risk & Compliance Manager

Company: Loenbro, LLC - IT

Business Unit/Department: Information Technology

Location: Remote

Reports to: Senior Director of Information Security

Employment Type: Full-Time

FLSA Classification: Exempt

About Loenbro Loenbro is a trusted, long-term construction lifecycle partner to thousands of customers across the U.S. Our market spans all industries, and our service offerings include Critical Electrical, Mechanical & Structural, Soft Crafts, Inspection, Underground Maintenance and Installation, and Fabrication. Our expertise lies in simplifying the complex and establishing long-standing relationships with our partners. We have a national presence but a local approach—every customer benefits from our capabilities and our care.At Loenbro, we don't just offer jobs—we build careers grounded in integrity, teamwork, excellence, and purpose. Join a team where your expertise is valued, your growth is supported, and your work helps maintain and enhance the critical infrastructure that powers communities across the nation.

Job Summary

The Governance, Risk & Compliance (GRC) Manager is responsible for leading and maturing the organization's governance, risk management, compliance, and audit programs. This role serves as the primary owner for cybersecurity compliance initiatives, including CMMC Level 2, SOC audits, and SOX IT General Controls (ITGC). The GRC Manager will partner with business, technology, and executive stakeholders to ensure security controls, policies, and compliance activities align with regulatory, contractual, and business requirements while supporting organizational risk management and audit readiness. This will be a hands on role.

Minimum Qualifications

10+ years of experience in Governance, Risk & Compliance (GRC), Information Security, Risk Management, or related cybersecurity functions.
3+ years of leadership, management, or program ownership experience.
Required: Direct experience leading or supporting CMMC Level 2 compliance programs.
Required: Hands-on experience managing SOC 1 and/or SOC 2 audits.
Required: Experience supporting SOX compliance and IT General Controls (ITGC) testing and remediation.
Strong understanding of NIST SP 800-171 requirements and cybersecurity control frameworks.
Experience conducting risk assessments, compliance gap analyses, and remediation planning.
Experience working with external auditors, assessors, and regulatory stakeholders.
Experience developing and maintaining security policies, standards, and governance documentation.
Strong communication, project management, and stakeholder management skills.
Preferred certifications: CISSP, CISM, CRISC, CISA, CIA, or CGRC.
Experience in a Defense Industrial Base (DIB) or regulated environment is highly preferred.

Physical Demands and Work Environment

The physical demands and work environment described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Work Environment:

Remote/Home Office: Primarily remote work requiring regular use of computers, virtual collaboration tools, and business applications.
Collaboration: Regular interaction with HR, IT, Business Systems, application vendors, and business stakeholders through virtual meetings and communication platforms.
Travel: Occasional travel may be required for company meetings, training, project activities, or other business needs.

This role requires compliance with all applicable safety regulations, personal protective equipment (PPE) requirements, and Loenbro's Environmental Health and Safety (EH&S) policies.

Benefits

Medical, dental, and vision insurance
401(k) retirement plan with company match
Paid time off (PTO) and holiday pay
Life and disability insurance
Professional development and training opportunities
Employee assistance program (EAP)

Benefits eligibility may vary based on employment classification and hours worked.

Guided by Core Values (LEAD), grounded in grit and a commitment to excellence, Loenbro betters our families, customers, and local communities. If you're ready to be part of a company that LEADS by: