GRC Lead

Voyager Technologies

. Own the end-to-end cybersecurity GRC program, including governance frameworks, risk management processes, and compliance activities .

Posted 9/29/2026full-timeRemote • United StatesSenior💰 $140,000 - $185,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing cybersecurity Governance, Risk, and Compliance (GRC) programs, including CMMC readiness and risk management. Proficient in coordinating audits, maintaining compliance frameworks, and collaborating with cross-functional teams to ensure adherence to regulatory standards.

Highest-signal resume keywords

CMMC Level 2/3 ImplementationGovernance, Risk, and Compliance (GRC)CISSP CertificationNIST SP 800-171 AssessmentControl Framework Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk ManagementCompliance ActivitiesEvidence CollectionPolicy DevelopmentAudit CoordinationGap AssessmentControl MappingRemediation TrackingRisk AssessmentEvidence Library Management

Soft Skills

Excellent Communication SkillsIndependent WorkCross-Functional CollaborationStakeholder ManagementProblem-Solving

Certifications & Qualifications

CISSPCISACRISCCISMCompTIA Security+CMMC Assessor Certification

Industry Keywords

CybersecurityGovernance FrameworksC3PAO CoordinationRisk RegisterThird-Party AssessmentsAudit-Ready ArtifactsRegulatory ComplianceDCSA CoordinationU.S. Person RequirementExport Authorizations

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Own the end-to-end cybersecurity GRC program, including governance frameworks, risk management processes, and compliance activities
Lead CMMC readiness efforts, including scoping, gap assessments, POA&M development, and coordination with the C3PAO through assessment
Manage the control framework by mapping controls to standards, tracking ownership, and driving remediation
Build and maintain the evidence library and ensure artifacts are accurate, complete, and audit-ready
Plan and support internal and external audits, assessments, and third-party reviews; serve as primary auditor contact
Maintain the organizational risk register, facilitate risk assessments, and track risk treatment decisions to closure
Partner with IT, engineering, legal, and operations to embed compliance requirements into processes, tools, and projects
Track regulatory and compliance changes and advise leadership
Report to the Senior Director of Cybersecurity within the IT department

Requirements

What you’ll need

Bachelor’s degree in information security or related field with 8 years of experience in GRC, information security compliance, or related field OR Master’s degree in information security or related field with 6 years of experience
Relevant certification such as CISSP, CISA, CRISC, CISM, or CompTIA Security+
Direct, hands-on experience with CMMC Level 2 or Level 3 or NIST SP 800-171 implementation and assessment preparation
Demonstrated ability to manage a control framework, including mapping, ownership assignment, evidence collection, and gap remediation
Experience drafting and maintaining information security policies and procedures
Proven track record supporting audits or third-party assessments, including evidence preparation and auditor coordination
Ability to work independently, manage multiple workstreams, and drive cross-functional stakeholders without direct authority
Excellent written and verbal communication skills, including translating technical compliance requirements for non-technical audiences
CMMC assessor certification such as CCP, CCA, or LCCA preferred
Prior experience building or maturing a GRC program from an early stage preferred
Background coordinating with C3PAOs or DCSA assessors preferred
Travel may be required to Voyager facilities, operational sites, and partner locations
Occasional participation in security exercises, incident response, or time-sensitive remediation outside normal business hours may be required
Must be a U.S. Person: U.S. citizen, lawful permanent resident of the U.S., or protected individual as defined by 8 U.S.C. § 1324b(a)(3)
Must be eligible to obtain required export authorizations from the U.S. Department of State or Department of Commerce

Benefits

Comp & perks

Flexible Time Off (FTO)
Comprehensive medical, dental, and vision coverage for employees and their families, with a significant portion of premiums covered by the company and many benefits paid at 100% for employees
Flexible, affordable gym memberships with 12,700+ options nationwide, including free on-demand workout videos before enrollment
401(k) retirement plan with a 50% company match on contributions up to 8%
Company wellness programs supporting physical and mental well-being
Additional voluntary benefits and employee support resources
Opportunity to work alongside a highly talented team in an innovative, mission-driven environment