Remote GRC Leader for Enterprise Security & Compliance

Merci Technologies, Inc.; Atlanta (GA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Merci Technologies seeks a seasoned Governance, Risk & Compliance (GRC) Manager to lead enterprise cybersecurity governance, regulatory compliance, risk management, audit readiness, and security policy initiatives.

This role bridges security operations, executive leadership, auditors, regulators, and business stakeholders to build a mature, scalable compliance program and drive continuous security improvement across the organization.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Business, Risk Management, or related field.
• 7+ years of experience in information security, compliance, audit, or GRC.
• Strong understanding of cybersecurity frameworks and regulatory requirements.
• Experience managing SOC 2, ISO 27001, NIST CSF, or similar programs.
• Experience conducting risk assessments and control evaluations.
• Knowledge of third-party risk management methodologies.
• Strong documentation, reporting, and communication skills.
• Ability to work effectively with executive leadership and auditors.

Responsibilities

• Lead the organization's Governance, Risk, and Compliance (GRC) program.
• Develop and maintain cybersecurity policies, standards, and procedures.
• Conduct enterprise security risk assessments and remediation planning.
• Manage compliance initiatives including SOC 2, ISO 27001, NIST, HIPAA, PCI-DSS, and GDPR where applicable.
• Coordinate internal and external audits.
• Develop and monitor security controls and compliance frameworks.
• Oversee third-party risk management and vendor security assessments.
• Create executive-level compliance and risk reporting dashboards.
• Partner with Legal, IT, Security, HR, and Operations teams.
• Maintain risk registers and ensure mitigation activities are tracked.
• Support customer security reviews and due diligence requests.
• Drive continuous improvement in governance and compliance processes.
• Educate stakeholders on compliance obligations and cybersecurity risks.

Skills

GRC management

Information security

Regulatory compliance

Risk assessment

Audit readiness

Policy development

Third-party risk management

Executive communication

Documentation

Stakeholder management

Education

Bachelor's degree in Cybersecurity or related field

Tools

Archer

AuditBoard

ServiceNow GRC

Drata

Vanta

Secureframe

Job description

Merci Technologies seeks a seasoned Governance, Risk & Compliance (GRC) Manager to lead enterprise cybersecurity governance, regulatory compliance, risk management, audit readiness, and security policy initiatives.

This role bridges security operations, executive leadership, auditors, regulators, and business stakeholders to build a mature, scalable compliance program and drive continuous security improvement across the organization.