Senior GRC Manager: Cybersecurity Compliance & Audit

Loenbro, LLC; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Paid time off

Job summary

Loenbro, LLC is seeking a senior leader to own governance, risk, compliance, and audit programs across the organization. The role focuses on maturing GRC functions and aligning security controls with regulatory and business requirements.

The candidate will drive cybersecurity compliance initiatives including CMMC Level 2, SOC audits, and SOX ITGC, partnering with stakeholders to maintain comprehensive policies and governance documentation.

Qualifications

• 10+ years of experience in GRC, information security, or related cybersecurity functions.
• Direct experience with CMMC Level 2, SOC 1/2 audits, and SOX ITGC testing.
• Strong understanding of NIST SP 800-171 and cybersecurity control frameworks.

Responsibilities

• Lead and mature governance, risk management, compliance, and audit programs.
• Own cybersecurity compliance initiatives including CMMC Level 2, SOC audits, and SOX ITGC.
• Partner with stakeholders to ensure controls align with regulatory, contractual, and business requirements.
• Conduct risk assessments, compliance gap analyses, and remediation planning.
• Manage external auditors, assessors, and regulatory stakeholders.
• Develop and maintain security policies, standards, and governance documentation.

Skills

GRC leadership

Information security

Cybersecurity

Audit management

Regulatory compliance

CMMC L2

SOC audits

SOX ITGC

NIST SP 800-171

Tools

NIST CSF

Job description

Loenbro, LLC is seeking a senior leader to own governance, risk, compliance, and audit programs across the organization. The role focuses on maturing GRC functions and aligning security controls with regulatory and business requirements.

The candidate will drive cybersecurity compliance initiatives including CMMC Level 2, SOC audits, and SOX ITGC, partnering with stakeholders to maintain comprehensive policies and governance documentation.