Senior Compliance Program Manager, GRC
Core
Manage complex compliance and governance initiatives across enterprise and regulated environments, including audit cycles, continuous monitoring, and third-party risk.
Role type
Senior IC compliance program manager (GRC)
Builds
Integrated compliance plans, audit-ready documentation, and mature third-party risk programs
Domain
Cybersecurity / Federal IT / GRC
Required skills
NIST 800-53, FedRAMP High, DoD IL5, SOC 2, ISO 27001, PCI DSS, third-party risk management, policy governance, audit coordination, program planning, stakeholder communication
Preferred skills
NIST 800-53 AT controls, supply chain risk management, security contract requirements, phishing simulation platforms, learning management systems
Technologies
NIST RMF, LMS, AI-assisted tools (Claude, ChatGPT)
Responsibilities
Coordinate audit cycles and continuous monitoring; maintain integrated program plans and track risks; develop and govern information security policies and training; manage third-party risk assessments and vendor documentation; translate regulatory requirements into operational processes
Seniority
Senior, hands-on IC