GRC & Security Risk Lead (Hybrid) — Build Mature Program

CHAOS Industries; Washington (District of Columbia); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health benefits

401k match

Free daily lunch

No meeting Fridays

Unlimited PTO

Relocation assistance

Job summary

CHAOS Industries is seeking a Governance, Risk & Compliance Analyst to mature the GRC program across the organization. You will establish governance, policies, standards, and accountability, and translate broad requirements into practical controls.

You will work with IT, Cybersecurity, Physical Security, and Manufacturing teams to drive risk-based decisions. The role requires a minimum of 5 years in GRC/compliance, DoD exposure, and strong knowledge of NIST and ISO frameworks.

Qualifications

• Bachelor's degree or equivalent in CS/cybersecurity/IT or related field.
• Minimum 5 years hands-on GRC or compliance experience.
• DoD experience or military service preferred.
• Deep knowledge of NIST CSF, RMF, ISO 27000, UK Cyber Essentials, CMMC/NIST 800-171, NIST 800-53.
• Experience with third-party audits and evidence collection.
• Ability to design real, working controls tailored to an organization.

Responsibilities

• Own risk assessments and centralized risk register.
• Design and maintain a unified control framework tailored to CHAOS Industries’ environment.
• Write policy beyond minimum compliance.
• Manage GRC tooling and related workflows.
• Prepare for and run third-party and certification audits, including evidence collection and auditor liaison.
• Act as glue between departments to translate requirements into security controls.
• Report risk posture and audit status to leadership.
• Onsite presence four days a week; travel up to 25%.
• Support security and compliance requirements with Legal, Compliance, IT, and business leaders.

Skills

GRC knowledge

Policy writing

Stakeholder communication

Auditing

Education

Bachelor's degree in CS/cybersecurity/IT or related field

Tools

GRC tooling

Job description

CHAOS Industries is seeking a Governance, Risk & Compliance Analyst to mature the GRC program across the organization. You will establish governance, policies, standards, and accountability, and translate broad requirements into practical controls.

You will work with IT, Cybersecurity, Physical Security, and Manufacturing teams to drive risk-based decisions. The role requires a minimum of 5 years in GRC/compliance, DoD exposure, and strong knowledge of NIST and ISO frameworks.