Remote GRC Lead - Cybersecurity & Compliance

Voyager Technologies, Inc.; Denver (CO); Remote; USD 140,000 - 185,000; Full time

Benefits offered by this job

Flexible Time Off

Medical/Dental/Vision

Gym memberships

401(k) match

Wellness programs

Job summary

Voyager Technologies, Inc. is seeking a GRC Lead to own and mature the Governance, Risk, and Compliance program, including CMMC.

This remote role reports to the Senior Director of Cybersecurity and works across IT, engineering, legal, and operations to embed compliance into processes. The successful candidate will manage control mappings, evidence libraries, audits, and risk assessments, and drive remediation.

Qualifications

• Bachelor's degree in information security or related field with 8 years of GRC experience OR Master's with 6 years.
• Certifications such as CISSP, CISA, CRISC, CISM, or CompTIA Security+.
• Hands-on CMMC (Level 2/3) or NIST SP 800-171 implementation/assessment.
• Experience mapping controls, evidence collection, and remediation.
• Experience drafting security policies and procedures.
• Audit support including evidence prep and auditor coordination.
• Independent work style with cross-functional collaboration.
• Strong communication skills for technical and non-technical audiences.

Responsibilities

• Own the end-to-end GRC program, governance frameworks, risk processes, and compliance activities (CMMC, NIST 800-171, FAR/DFARS).
• Lead CMMC readiness including scoping, gap assessments, POA&M, and coordination with the C3PAO.
• Manage control framework mapping, ownership, evidence collection, and remediation of gaps.
• Build and maintain the evidence library; ensure artifacts are audit-ready.
• Plan and support internal/external audits and third-party reviews; primary auditor liaison.
• Maintain organizational risk register; facilitate risk assessments and track treatment.
• Partner with IT, engineering, legal, and operations to embed compliance into processes.
• Track regulatory landscape and advise leadership on changes.

Skills

GRC management

CMMC experience

Policy drafting

Audit support

Risk management

Stakeholder coordination

CMMC readiness

Education

Bachelor's in information security

Master's in information security

Job description

Voyager Technologies, Inc. is seeking a GRC Lead to own and mature the Governance, Risk, and Compliance program, including CMMC.

This remote role reports to the Senior Director of Cybersecurity and works across IT, engineering, legal, and operations to embed compliance into processes. The successful candidate will manage control mappings, evidence libraries, audits, and risk assessments, and drive remediation.