Remote Security GRC Program Manager

United States Digital Space LLC; United States; Remote; USD 130,000 - 190,000; Full time

Job summary

The company in the United States is seeking a Security GRC Program Manager to serve as the primary interface between Security and external auditors, regulators, and compliance stakeholders. You will represent the Security team in audit engagements, explain control design and operation, and ensure global regulatory obligations are met with rigor.

You will act as a proxy between regulators and internal security teams, maintaining consistency in responses and helping mature a lean, effective

Qualifications

• 6+ years in Security GRC or technology compliance roles.
• Experience with global regulatory requirements (DORA, FFIEC, EBA, NYDFS).
• Experience conducting security audits and supporting compliance across multiple frameworks.
• Strong program management and cross-time-zone coordination.
• Excellent communication for auditors and executives.

Responsibilities

• Act as SMA/subject matter expert during cross-functional audit engagements with regulators and auditors.
• Liaise between Security and auditors to ensure consistent audit responses.
• Create and maintain a central repository of audit evidence for SOC 2, PCI DSS, SOX and other standards.
• Perform risk and control assessments against frameworks to ensure policy compliance.
• Support control owners with guidance on security control design and remediation.
• Coordinate regulatory obligations across legal entities and track remediation efforts.
• Support policy writing, security awareness training, and third-party risk assessments.

Skills

NIST CSF

SOC 2

PCI DSS

ISO 27001/2

Audit processes

Job description

The company in the United States is seeking a Security GRC Program Manager to serve as the primary interface between Security and external auditors, regulators, and compliance stakeholders. You will represent the Security team in audit engagements, explain control design and operation, and ensure global regulatory obligations are met with rigor.

You will act as a proxy between regulators and internal security teams, maintaining consistency in responses and helping mature a lean, effective