Governance, Risk & Compliance (GRC) Manager (Fully Remote)

Loenbro, LLC; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Paid time off

Job summary

Loenbro, LLC is seeking a senior leader to own governance, risk, compliance, and audit programs across the organization. The role focuses on maturing GRC functions and aligning security controls with regulatory and business requirements.

The candidate will drive cybersecurity compliance initiatives including CMMC Level 2, SOC audits, and SOX ITGC, partnering with stakeholders to maintain comprehensive policies and governance documentation.

Qualifications

• 10+ years of experience in GRC, information security, or related cybersecurity functions.
• Direct experience with CMMC Level 2, SOC 1/2 audits, and SOX ITGC testing.
• Strong understanding of NIST SP 800-171 and cybersecurity control frameworks.

Responsibilities

• Lead and mature governance, risk management, compliance, and audit programs.
• Own cybersecurity compliance initiatives including CMMC Level 2, SOC audits, and SOX ITGC.
• Partner with stakeholders to ensure controls align with regulatory, contractual, and business requirements.
• Conduct risk assessments, compliance gap analyses, and remediation planning.
• Manage external auditors, assessors, and regulatory stakeholders.
• Develop and maintain security policies, standards, and governance documentation.

Skills

GRC leadership

Information security

Cybersecurity

Audit management

Regulatory compliance

CMMC L2

SOC audits

SOX ITGC

NIST SP 800-171

Tools

NIST CSF

Job description

• Lead and mature the organization's governance, risk management, compliance, and audit programs.
• Serve as the primary owner for cybersecurity compliance initiatives including CMMC Level 2, SOC audits, and SOX ITGC.
• Partner with stakeholders to ensure security controls and policies align with regulatory, contractual, and business requirements.

Responsibilities:

• Conduct risk assessments, compliance gap analyses, and remediation planning.
• Manage external auditors, assessors, and regulatory stakeholders.
• Develop and maintain security policies, standards, and governance documentation.

Qualifications:

• 10+ years of experience in GRC, information security, or related cybersecurity functions.
• Direct experience with CMMC Level 2, SOC 1/2 audits, and SOX ITGC testing.
• Strong understanding of NIST SP 800-171 and cybersecurity control frameworks.
• Medical, dental, and vision insurance with comprehensive coverage.
• 401(k) retirement plan with company match, PTO, and holiday pay.
• Life and disability insurance, professional development, and employee assistance program.

Loenbro is a trusted construction lifecycle partner serving thousands of customers across the U.S. with services including electrical, mechanical, structural, inspection, and fabrication. The company has a national presence with a local approach and fosters a culture of integrity, teamwork, and purpose.