Remote GRC Leader - Cybersecurity Governance & Compliance

Merci Technologies, Inc.; San Jose, Northern (CA, KY); Hybrid; USD 140,000 - 210,000; Full time

Job summary

Merci Technologies is partnering with a client to seek a Governance, Risk & Compliance (GRC) Manager to lead enterprise cybersecurity governance, regulatory compliance, risk management, audit readiness, and security policy initiatives.

This role bridges security operations, executive leadership, auditors, regulators, and business stakeholders to drive a mature, scalable GRC program and ensure ongoing compliance across SOC 2, ISO 27001, NIST, HIPAA, PCI-DSS, and GDPR where applicable.

Qualifications

• Bachelor’s degree or higher in a related field.
• 7+ years of experience in information security, compliance, audit, or GRC.
• Strong understanding of cybersecurity frameworks and regulatory requirements.
• Experience managing SOC 2, ISO 27001, NIST CSF, or similar programs.
• Ability to document, report, and communicate effectively.
• Ability to work with executive leadership and auditors.

Responsibilities

• Lead the organization's Governance, Risk, and Compliance program.
• Develop and maintain cybersecurity policies, standards, and procedures.
• Conduct enterprise security risk assessments and remediation planning.
• Manage compliance initiatives such as SOC 2, ISO 27001, NIST, HIPAA, PCI-DSS, and GDPR where applicable.
• Coordinate internal and external audits.
• Develop and monitor security controls and compliance frameworks.
• Oversee third-party risk management and vendor security assessments.
• Create executive-level compliance and risk reporting dashboards.
• Partner with Legal, IT, Security, HR, and Operations teams.
• Maintain risk registers and ensure mitigation activities are tracked.
• Support customer security reviews and due diligence requests.
• Drive continuous improvement in governance and compliance processes.
• Educate stakeholders on compliance obligations and cybersecurity risks.

Skills

GRC leadership

Policy development

Risk assessment

Audit readiness

Regulatory compliance

Stakeholder communication

Education

Bachelor's degree in Cybersecurity, Information Systems, Business, Risk Management, or related field

Tools

Archer

AuditBoard

ServiceNow GRC

Drata

Vanta

Secureframe

Job description

Merci Technologies is partnering with a client to seek a Governance, Risk & Compliance (GRC) Manager to lead enterprise cybersecurity governance, regulatory compliance, risk management, audit readiness, and security policy initiatives.

This role bridges security operations, executive leadership, auditors, regulators, and business stakeholders to drive a mature, scalable GRC program and ensure ongoing compliance across SOC 2, ISO 27001, NIST, HIPAA, PCI-DSS, and GDPR where applicable.