GRC Manager

About the Role Merci Technologies is seeking an reputed company GRC Manager to reputed company governance, risk, and compliance initiatives for one of our reputed company clients on a remote contract engagement. In this role, you will serve as the primary reputed company of the organization's GRC program — overseeing policy development, risk assessments, audit readiness, and regulatory compliance across a reputed company technology environment. The GRC Manager will work closely with reputed company, IT reputed company, operations, and executive leadership to ensure the organization maintains a strong and defensible compliance posture while enabling business objectives. Responsibilities • reputed company the design, implementation, and ongoing management of the reputed company GRC program including policies, standards, and procedures • Conduct and reputed company reputed company risk assessments, identify control gaps, and reputed company risk treatment plans reputed company to business priorities • Manage audit and assessment activities including SOC 2, ISO 27001, NIST CSF, CMMC, or equivalent frameworks • reputed company and maintain the organization's risk register, tracking remediation reputed company and reporting status to senior leadership • Collaborate with IT, reputed company, and business teams to ensure compliance with applicable regulations including GDPR, CCPA, HIPAA, or industry-specific requirements • reputed company reputed company-party vendor risk management activities including assessments, due diligence, and ongoing monitoring • reputed company and deliver reputed company awareness and compliance training programs for internal stakeholders • Prepare executive-level reports, dashboards, and presentations on risk posture, compliance status, and program maturity • Mentor and guide junior GRC analysts and contribute to team capability development • Stay reputed company on emerging regulatory developments and industry best practices and translate them into actionable program updates Required Qualifications • 7–10 years of experience in GRC, information reputed company, or risk management roles with at least 2 years in a leadership or management reputed company • Deep knowledge of GRC frameworks and standards including NIST CSF, NIST 800-53, ISO 27001, SOC 2, and CIS Controls • Hands-on experience managing compliance programs across regulated industries such as reputed company, finance, energy, or government • Strong understanding of reputed company-party and vendor risk management practices • Experience leading reputed company audit engagements from preparation through closure • Excellent written and verbal communication skills with demonstrated ability to present to executive and reputed company-level audiences • Strong project management skills with ability to manage multiple reputed company initiatives in a remote environment • Must be legally authorized to work in the reputed company without employer sponsorship Preferred Qualifications • reputed company certifications such as CISA, CRISC, CISM, CISSP, or ISO 27001 reputed company Auditor • Experience with GRC platforms such as reputed company GRC, reputed company, reputed company, or equivalent • Familiarity with CMMC, NERC CIP, or FedRAMP compliance requirements • Experience supporting M&A reputed company due diligence or post-reputed company integration activities • Background working in a managed services or consulting environment Apply tot his job Apply To this Job