Remote GRC & Compliance Leader — SOC, CMMC & ITGC Expert

Loenbro; Westminster (CO); Remote; USD 149,000 - 182,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan with company 12

Paid time off and holiday pay

Life and disability insurance

Professional development and training

Employee assistance program (EAP)

Job summary

Loenbro is seeking a Governance, Risk & Compliance Manager to lead the organization’s GRC program remotely. You will own cybersecurity compliance initiatives, including CMMC Level 2, SOC audits, and SOX ITGC, partnering with stakeholders to ensure controls align with regulatory and business needs.

The role demands hands-on leadership, risk assessment experience, and strong policy development skills. This full-time remote position collaborates with HR, IT, and executive teams across the U.S.

Qualifications

• 10+ years in GRC, information security, risk management, or related cybersecurity roles.
• Led or supported CMMC Level 2 compliance programs.
• Managed SOC 1 and/or SOC 2 audits and IT general controls testing.
• Experience with SOX ITGC testing and remediation.
• Strong understanding of NIST frameworks and risk management.
• Proven ability to develop security policies and governance docs.
• Effective communication and stakeholder management skills.
• Preferred: CISSP, CISM, CRISC, CISA, CIA, or CGRC certifications.

Responsibilities

• Lead and mature the organization's GRC program and audits.
• Own cybersecurity compliance initiatives including CMMC Level 2, SOC audits, and ITGC.
• Collaborate with business and tech leaders to align controls with requirements.
• Support audit readiness and remediation plans across departments.
• Provide hands-on leadership in governance, risk management, and security policy development.

Skills

GRC leadership

CMMC Level 2

SOC audits

SOX ITGC

NIST SP 800-171

Risk assessments

Security policies

Governance documentation

Stakeholder management

Project management

External auditors liaison

GRC certifications

DIB/regulatory environment

Job description

Loenbro is seeking a Governance, Risk & Compliance Manager to lead the organization’s GRC program remotely. You will own cybersecurity compliance initiatives, including CMMC Level 2, SOC audits, and SOX ITGC, partnering with stakeholders to ensure controls align with regulatory and business needs.

The role demands hands-on leadership, risk assessment experience, and strong policy development skills. This full-time remote position collaborates with HR, IT, and executive teams across the U.S.