Senior GRC Program Manager—DoD RMF/CMMC Compliance

Menlo Ventures; California (MO); On-site; USD 140,000 - 215,000; Full time

Benefits offered by this job

Equity + Benefits

Health, Dental, Vision

PTO & Holidays

401K & Parental Leave

Job summary

True Anomaly seeks an experienced Senior Program Manager to lead cross-functional GRC initiatives across the organization. You will manage certification programs like DoD RMF IL5/IL6 and CMMC, with KPI tracking and dashboard-driven reporting to ensure compliance and audit readiness.

The role requires coordinating across engineering, security, legal, compliance, and business operations, operating in fast-paced, regulated environments, and delivering timely updates to leadership and external

Qualifications

• 7+ years of program or project management experience in technology or cybersecurity-related roles, with at least 5 years in GRC or compliance environments.
• PMP (Project Management Professional)
• Proven experience managing certification initiatives involving CMMC, DoD RMF IL5 and IL6.
• Demonstrated ability to manage multi-disciplinary teams and complex project interdependencies across business and technical stakeholders.
• Strong proficiency in program management and documentation tools.

Responsibilities

• Lead GRC-related program tracking from inception through delivery across multiple frameworks (e.g., DoD RMF IL5 and IL6, CMMC).
• Build and maintain program dashboards and executive reports using tools such as Jira, Confluence, GRC platforms (e.g., Diligent), and MS Project to provide transparency across teams and to leadership.
• Coordinate and manage timelines, resources, and deliverables across security operations, product compliance, IT operations, and external consultants.
• Track program status against milestones, identify risks and dependencies, and drive timely mitigation plans and course correction as needed.
• Define and monitor Key Performance Indicators (KPIs) for compliance programs and team performance, ensuring successful execution of tasks and ongoing audit readiness.
• Serve as the primary point of contact for internal stakeholders, executive leadership, and external assessors or certification bodies.
• Support compliance readiness activities including pre-assessment readiness, audit facilitation, evidence collection, and post-audit remediation planning.
• Continuously improve project workflows, team coordination, and reporting processes for scalable and repeatable program management.

Skills

GRC program management

CMMC RMF IL5 IL6

Cross-functional leadership

PMP certification

Education

PMP certification

Tools

Jira

Confluence

MS Project

Diligent (GRC platform)

Job description

True Anomaly seeks an experienced Senior Program Manager to lead cross-functional GRC initiatives across the organization. You will manage certification programs like DoD RMF IL5/IL6 and CMMC, with KPI tracking and dashboard-driven reporting to ensure compliance and audit readiness.

The role requires coordinating across engineering, security, legal, compliance, and business operations, operating in fast-paced, regulated environments, and delivering timely updates to leadership and external