Remote Senior GRC Advisor for Space & Defense

Malleum; California (MO); Hybrid; CAD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive executive compensation

Equity-style participation in practice

Certification sponsorship

Flat, high-trust culture

Continuous learning budget

Job summary

Malleum is seeking a very senior governance, risk and compliance specialist to lead strategic GRC engagements and scale our advisory practice in space, aerospace, and defense sectors. This remote role travels to client sites, typically Ontario-based, as required.

You will serve as trusted counsel to CISOs, CIOs, CROs and boards, translating regulatory complexity into pragmatic, mission-aligned programs and mentoring the next generation of Malleum advisors.

Qualifications

• 15+ years of cybersecurity and GRC experience in leadership roles.
• Experience building and scaling Cyber Resilience Programs.
• Deep expertise in CMMC Levels 1–3 and CPCSC requirements.
• Experience advising space, aerospace, and defense sectors; ITAR/CGP familiarity.
• Strong knowledge of NIST CSF 2.0, NIST 800-53/171/172, ISO 27001/27005, ITSG‑33, SOC 2, and privacy regimes (PIPEDA, GDPR).
• Executive presence and ability to advise CISOs, CIOs, CFOs, GCs, audit committees, boards.
• Bachelor's degree; MBA/MS preferred.

Responsibilities

• Lead executive-level GRC advisory engagements across space, aerospace, defense, government, and critical infrastructure.
• Stand up and mature Cyber Resilience Programs at large enterprises, integrating governance, risk management, business continuity, third‑party risk, and incident readiness into a cohesive operating model.
• Advise C‑suite and board stakeholders on cyber risk posture, regulatory exposure, and strategic investment priorities.
• Lead client journeys to CMMC readiness and CPCSC requirements, including scoping, gap assessments, SSP/POAM development, and assessor coordination.
• Lead client adoption of CPCSC for organizations supporting the Government of Canada defense supply chain.
• Develop, operationalize, and audit programs aligned with NIST CSF 2.0, NIST 800‑53/171/172, ISO 27001/27005, ITSG‑33, SOC 2, and privacy regimes.
• Advise space-sector clients on evolving requirements such as Space ISAC guidance and allied space defense expectations.
• Define and implement enterprise risk management frameworks, KRIs/KPIs, risk appetite statements, and board reporting cadences.
• Lead third‑party / supply‑chain risk programs aligned with defense industrial base and allied requirements.
• Shape Malleum's GRC service offerings, methodologies, accelerators, and intellectual property.
• Mentor and develop senior managers, managers, and consultants.
• Drive business development: trusted‑advisor relationships, account growth, proposals, and thought leadership.
• Represent Malleum in industry forums, regulator engagements, client briefings, and executive roundtables.

Skills

Cybersecurity leadership

GRC management

Regulatory compliance

CMMC knowledge

NIST CSF

Board-level advisory

Mentoring teams

Executive communication

Strategic risk thinking

Education

Bachelor's degree

MBA/MS preferred

Tools

CISSP

CISM

CRISC

CGEIT

CISA

Job description

Malleum is seeking a very senior governance, risk and compliance specialist to lead strategic GRC engagements and scale our advisory practice in space, aerospace, and defense sectors. This remote role travels to client sites, typically Ontario-based, as required.

You will serve as trusted counsel to CISOs, CIOs, CROs and boards, translating regulatory complexity into pragmatic, mission-aligned programs and mentoring the next generation of Malleum advisors.