Remote GRC Manager - CMMC, SOC, ITGC

Loenbro; Oregon; Hybrid; USD 149,000 - 182,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan with company | 

Paid time off (PTO) and holiday pay

Life and disability insurance

Professional development and training

Employee assistance program (EAP)

Job summary

Loenbro is seeking a Governance, Risk & Compliance Manager to lead and mature the organization's GRC, cyber risk, and audit programs. This hands‑on role centers on CMMC Level 2, SOC audits, and IT General Controls, partnering with business, technology, and executive stakeholders to ensure controls and policies meet regulatory, contractual, and risk requirements while supporting audit readiness.

You bring 10+ years in GRC or information security, 3+ years in leadership, and direct CMMC Level 2

Qualifications

• 10+ years in GRC or cybersecurity roles.
• 3+ years in leadership or program ownership.
• Direct experience with CMMC Level 2, SOC 1/2, and ITGC testing.
• Strong knowledge of NIST SP 800-171 and control frameworks.
• Experience working with external auditors and regulatory bodies.
• Excellent communication and project management skills.
• Preferred: CISSP, CISM, CRISC, CISA, CIA, or CGRC.
• Experience in DIB or regulated environments preferred.

Responsibilities

• Lead and mature the GRC program across the company.
• Own CMMC Level 2, SOC audits, and ITGC activities.
• Collaborate with business, IT, and executive stakeholders.
• Ensure policies and controls meet regulatory and contractual requirements.
• Maintain audit readiness and remediation tracking.
• Hands-on implementation and operation of security controls.

Skills

GRC management

Cybersecurity governance

Audit coordination

CMMC Level 2

SOC audits

SOX ITGC

NIST SP 800-171

Risk assessment

Policy development

Stakeholder management

Communication skills

Job description

Loenbro is seeking a Governance, Risk & Compliance Manager to lead and mature the organization's GRC, cyber risk, and audit programs. This hands‑on role centers on CMMC Level 2, SOC audits, and IT General Controls, partnering with business, technology, and executive stakeholders to ensure controls and policies meet regulatory, contractual, and risk requirements while supporting audit readiness.

You bring 10+ years in GRC or information security, 3+ years in leadership, and direct CMMC Level 2