GRC & Cybersecurity Leader — CMMC & ERM Champion

Riverside Research; Beavercreek (OH); On-site; USD 140,000 - 170,000; Full time

Job summary

Riverside Research is seeking a Manager of Governance, Risk & Compliance in Beavercreek, OH. You will lead the GRC program, own the CMMC program, and mentor a team of analysts to ensure regulatory and contractual cybersecurity compliance across the organization.

You will partner with IT, Legal, Contracts, HR, and Finance to integrate security controls with business processes, maintain enterprise risk management, and communicate risk to executives.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Assurance, Business, or a related discipline.
• Twelve (12) years of progressively responsible experience in cybersecurity, information assurance, governance, risk, compliance, or related disciplines, including at least three (3) years of leadership experience managing technical teams or enterprise cybersecurity programs.
• Demonstrated success leading external security assessments, regulatory audits, or certification efforts within a regulated industry such as the Defense Industrial Base, government contracting, financial services, healthcare, or telecommunications.
• Strong knowledge of Cybersecurity Maturity Model Certification (CMMC), NIST SP 800-171, Department of Defense CUI requirements, and applicable FAR and DFARS cybersecurity clauses.
• Experience developing and maintaining cybersecurity governance programs, policies, standards, and enterprise compliance initiatives.
• Strong understanding of enterprise information technology including Microsoft 365, Microsoft Entra ID, Microsoft Azure, Amazon Web Services (AWS), virtualization, and hybrid infrastructure.
• Excellent written, verbal, and presentation skills with the ability to communicate complex technical concepts to executive leadership and non-technical stakeholders.
• Demonstrated ability to lead cross-functional initiatives, influence organizational change, and build collaborative relationships across multiple business functions.

Responsibilities

• Lead the GRC program supporting enterprise cybersecurity strategy, governance framework, and compliance objectives.
• Own the CMMC program, ensuring readiness for annual affirmations and C3PAO assessments.
• Lead and mentor a team of GRC Analysts, establishing priorities and fostering accountability and improvement.
• Develop, maintain, and govern enterprise cybersecurity policies, standards, procedures, and documentation.
• Lead ERM program by facilitating risk identification, assessment, mitigation planning, and executive reporting.
• Drive monitoring activities through auditing, internal controls, and compliance reviews.
• Manage corrective action plans, findings, POA&Ms, and remediation activities.
• Provide governance oversight for IAM, vulnerability management, configuration management, incident response, and data protection.
• Partner with IT and Security to ensure architecture aligns with regulatory requirements and risk tolerance.
• Maintain awareness of evolving FAR, DFARS, CMMC, NIST, and DoD cybersecurity requirements; advise leadership on changes.
• Develop executive dashboards and reports communicating cybersecurity posture and risk to senior leadership.
• Collaborate with Contracts, HR, Finance, Legal, Marketing, and Ops to integrate governance into business processes.
• Serve as trusted advisor translating cybersecurity, compliance, and risk into actionable business recommendations.

Skills

Leadership

Communication

Strategic thinking

Cross-functional collaboration

Regulatory understanding

Education

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Assurance, Business, or related discipline

Tools

Microsoft 365

Microsoft Entra ID

Microsoft Azure

Amazon Web Services (AWS)

Virtualization

Hybrid infrastructure

Job description

Riverside Research is seeking a Manager of Governance, Risk & Compliance in Beavercreek, OH. You will lead the GRC program, own the CMMC program, and mentor a team of analysts to ensure regulatory and contractual cybersecurity compliance across the organization.

You will partner with IT, Legal, Contracts, HR, and Finance to integrate security controls with business processes, maintain enterprise risk management, and communicate risk to executives.