Senior Cyber GRC Engineer — Remote, Lead Compliance & Security

PDW; United States; Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, vision package

401(k) with company match

Parental Leave

On-site gym at Denver/ Huntsville

Life insurance

Employee Assistance Program

Competitive PTO and flexible leave

Job summary

PDW is seeking a senior cybersecurity governance, risk, and compliance contributor to shape enterprise IT, engineering, manufacturing, and business systems security programs.

You will translate regulatory and contractual requirements into clear controls, manage risk assessments, and drive evidence collection, audits, and remediation. The role combines strategic governance with hands-on security operations and collaboration with auditors and vendors.

Qualifications

• 7+ years in cybersecurity, information security, or related discipline.
• Experience implementing or assessing security programs against CMMC/NIST 800-171.
• Familiarity with ISO 27001 and control-based ISMS implementations.
• Experience with ITAR/export controls and defense-contracting environments.
• Hands-on with security tools and vulnerability management platforms.
• Ability to document and communicate controls, evidence, and remediation plans.

Responsibilities

• Define priorities, standards, control requirements, and roadmaps for GRC program.
• Lead readiness for compliance frameworks and customer requirements.
• Translate requirements into actionable controls and partner with system owners.
• Own core GRC processes: risk assessments, evidence collection, audits, remediation.
• Stay hands-on with security tooling and incident-response activities.
• Manage vulnerability-management processes and remediation tracking.
• Collaborate with IT/engineering to harden endpoints and identities.
• Develop cybersecurity metrics for leadership and audit readiness.
• Coordinate with auditors, customers, and vendors to address findings.
• Build repeatable processes and evidence collection for scale.

Skills

GRC program leadership

CMMC knowledge

NIST SP 800-171

ISO 27001

ITAR/Export controls

security tooling hands-on

vulnerability management

incident response

risk assessments

audit readiness

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Tenable

Qualys

Rapid7

Microsoft Defender

CrowdStrike

SIEM

Job description

PDW is seeking a senior cybersecurity governance, risk, and compliance contributor to shape enterprise IT, engineering, manufacturing, and business systems security programs.

You will translate regulatory and contractual requirements into clear controls, manage risk assessments, and drive evidence collection, audits, and remediation. The role combines strategic governance with hands-on security operations and collaboration with auditors and vendors.