Manager, Governance, Risk and Compliance

Path Robotics; Columbus (OH); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Daily free lunch

Flexible PTO

Comprehensive medical, dental, and vision coverage

401(k) retirement plan

Generous employee referral bonuses

6 weeks fully paid parental leave

Job summary

Path Robotics in Columbus, Ohio is looking for an experienced Cybersecurity Governance, Risk and Compliance (GRC) Manager to lead their enterprise GRC program. This key role involves building and overseeing the GRC program, ensuring compliance with ISO 27001, CMMC, and FedRAMP standards.

The ideal candidate will have a Bachelor’s Degree and extensive experience in IT Risk Management, project management, and regulatory compliance. Benefits include flexible PTO, comprehensive health coverage, and a generous parental leave policy.

Qualifications

• 3+ years of experience in leading IT Risk Management roles.
• 5+ years experience with regulatory compliance frameworks.
• Experience supporting cloud environments (AWS, Azure).

Responsibilities

• Lead the build-out of the Cybersecurity GRC program.
• Coordinate and manage policy implementation to minimize risk.
• Conduct ongoing internal risk assessments and manage risk register.

Skills

Leadership in IT Risk Management

Regulatory compliance (CMMC, FISMA)

Risk assessments

Project management

Education

Bachelor’s Degree in related field

Tools

GRC tooling

Job description

At Path Robotics, we’re building the future of embodied intelligence. Our AI-driven systems enable robots to adapt, learn, and perform in the real world, closing the skilled labor gap and transforming industries. We combine perception, reasoning, and control to deliver field‑ready AI that is risk‑aware, reliable, and continuously improving through real‑world use.

Build the Path Forward

We are seeking an experienced Cybersecurity Governance, Risk and Compliance (GRC) Manager to build and lead the enterprise GRC program. This role will assist in the build‑out of the GRC program from early stages to completed services, supporting the ongoing governance standards, risk assessments and remediations, and certification and regulatory requirements.

What You’ll Do

• Assist in the build‑out and lead the Cybersecurity GRC program
• Lead with hands‑on support of the day‑to‑day activities of the GRC program
• Provide project management across governance, risk and compliance disciplines
• Coordinate, oversee and manage the development, implementation and enforcement of policies, procedures and programs to minimize risk
• Develop and execute testing plans to ensure compliance of policies, procedures and associated controls to ensure regulatory compliance requirements are met
• Conduct ongoing internal risk assessments, manage the risk register, and work with relevant teams to reduce or remediate identified risks
• Evaluate testing results, identify control gaps or weaknesses, track remediations to closure and conduct follow‑up testing
• Assist in conducting third‑party risk assessments of vendors
• Provide reporting of risk and compliance programs regularly to committee members and/or leadership
• Assist in implementing and managing certification programs, including:
  • ISO 27001, NIST 800‑171 / CMMC Level 2
  • FedRAMP (Moderate)
  • Own and manage GRC tooling to document, track and report on risk and compliance status
• Provide guidance to internal teams on control improvement, compliance requirements and audit readiness
• Monitor for and communicate laws, rules, regulations and framework changes to control owners to ensure timely update of control requirements

Who You Are

• Bachelor’s Degree in business, finance, information management, or other related field
• 3+ years of experience in leadership of IT Risk Management, IT Compliance, or Audit roles
• 3+ years of experience working with regulatory compliance requirements (e.g. CMMC, FISMA, GLBA, HIPAA, SOx, etc.)
• 5+ years experience assessing and meeting framework control requirements (NIST 800‑53, NIST CSF, CIS, CSA, etc.)

Preferred Qualifications

• Professional certifications in two or more of the following:
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Systems Auditor (CISA)
  • Certified Information Security Manager (CISM)
  • Certified in Governance Risk and Compliance (CGRC)
  • Certified in Risk and Information Systems Control (CRISC)
  • Governance, Risk and Compliance Professional (GRCP)
  • ISO 27001 Lead Implementer or Lead Auditor
• Experience supporting cloud environments (e.g., AWS, Azure, GCP) in regulated or government‑focused environments
• Proven track record of building Governance, Risk and/or Compliance programs from the ground up and scaling them to meet business growth and needs

What Success Looks Like in This Role

• Transformation from startup to regulatory compliant entity
• Ensuring policies and procedures are reviewed and updated to meet baseline business and compliance needs
• Year‑round risk program that identifies, remediates and reduces overall risk to the organization
• Able to translate complex risk and compliance issues into actionable strategies for key stakeholders
• Continuously meet requirements for ISO 27001, CMMC Level 2 and FedRAMP certification and compliance audits
• Strong cross‑functional collaboration within all business and technology teams

Why You’ll Love Working Here

• Daily free lunch to keep you fueled and connected with the team
• Flexible PTO so you can take the time you need, when you need it
• Comprehensive medical, dental, and vision coverage
• 6 weeks fully paid parental leave, plus an additional 6–8 weeks for birthing parents (12–14 weeks total)
• 401(k) retirement plan through Empower
• Generous employee referral bonuses—help us grow our team!

Who We Are

At Path Robotics we love coming to work to solve interesting and tough challenges but also because our ideas are welcomed and valued. We encourage unique thinking and are dedicated to creating a diverse and inclusive environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

If you require a reasonable accommodation to participate in the application process or any part of the hiring process, please contact [e-mail]. We are committed to providing equal access and will work with qualified individuals to ensure a fair and accessible hiring experience. We will respond to your request within 48 hours.