Senior GRC & Information Security Manager (ISO 27001)

CloudHQ, LLC; Ashburn (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive benefits (medical, etc.)

401(k) with match

12 paid holidays

Generous PTO

Job summary

CloudHQ, LLC is seeking an Information Security & Compliance Manager in Ashburn, VA to lead GRC, audits, and information security programs. You will oversee the ISMS, manage risk assessments, and coordinate remediation with cross-functional teams.

Reporting to the Director of Audit & Compliance, you will drive continual improvement, update policies, and coordinate certifications while guiding analysts and stakeholders across the organization.

Qualifications

• 7+ years of demonstrated professional experience in Governance, Risk, and Compliance (GRC), cybersecurity compliance, IT audit, risk management, or closely related functions.
• Minimum 5 years of hands-on experience with ISO 27001, SOC 1, SOC 2, and/or other recognized security, risk, or compliance frameworks.
• Hands-on experience using GRC platforms such as OneTrust, Hyperproof, RSA Archer, ServiceNow GRC, AuditBoard, LogicGate, or comparable GRC solutions.
• Minimum 3 years of demonstrated experience managing or directly supervising GRC, information security, audit, compliance, or related professionals.
• Proven leadership coaching and development of team members, including prioritization and workload management.
• Experience leading internal and external audits, certification activities, control assessments, risk assessments, and remediation programs.
• Experience translating framework, regulatory, and contractual requirements into practical controls.
• Strong knowledge of privacy, data protection, and applicable legal/regulatory requirements.

Responsibilities

• Manage day-to-day GRC, audit, information security compliance programs and related activities.
• Provide direct management and development to Information Security & Compliance Analysts.
• Lead audits, assessments, and remediation, ensuring audit readiness.
• Oversee ISMS and guidance for ISO 27001:2022, SOC 1, SOC 2, ISO 14001, ISO 50001.
• Coordinate documentation for certifications, attestations, customer requirements, and regulatory obligations.
• Partner with process owners to identify gaps, risks, and remediation plans.
• Maintain governance, risk, and compliance platforms, dashboards, and reporting.

Skills

GRC Leadership

InfoSec Leadership

ISO 27001 / SOC

Audit & Remediation

GRC Platforms

Team Management

Policy Development

Risk Management

Training & Awareness

Education

Bachelor’s degree

Tools

OneTrust

Hyperproof

RSA Archer

ServiceNow GRC

AuditBoard

LogicGate

Job description

CloudHQ, LLC is seeking an Information Security & Compliance Manager in Ashburn, VA to lead GRC, audits, and information security programs. You will oversee the ISMS, manage risk assessments, and coordinate remediation with cross-functional teams.

Reporting to the Director of Audit & Compliance, you will drive continual improvement, update policies, and coordinate certifications while guiding analysts and stakeholders across the organization.