Lead GRC Specialist (GCC / GCCH)

About the Role

This is a detail-oriented and proactive role to support and enhance our client’s governance, risk management, and CMMC compliance. The role requires a strong working knowledge of CMMC Level 1 and Level 2 requirements and involves identifying, assessing, and mitigating risks while ensuring adherence to regulatory requirements, industry standards, and policies.

Responsibilities

• Scoping:
  • Determine GCC or GCC High tenant needs
  • Determine applicable compliance obligations
  • Define enclave/physical network architecture requirements
  • Assess physical security requirements (if not an enclave)
  • Work through scoping questionnaire and Consent to Proceed – internally and with client
  • Participate in creating an implementation timeline
• Client Meetings:
  • Lead discussions and answer client questions
  • Conduct biweekly scoping meetings
  • Address cybersecurity maintenance checklist activities
• Assessment Prep, Documentation & Additional Responsibilities:
  • Maintain clear, complete, and accurate ticket documentation
  • Treat all documentation as potential assessment evidence
  • Follow naming conventions and use appropriate templates
  • Follow the implementation plan for clients
  • Provide direction to the team on CMMC questions
  • Work with the Compliance Officer for direction as needed
  • Collaborate with the GRC Admin on documentation preparation

Consistency and accuracy in scoping and documentation directly affect a client’s ability to pass a CMMC assessment. This role ensures that all GRC processes and procedures are followed so the client can be validated consistently—months or years later—by an assessor.

Requirements

• Required Skills & Attributes:
  • CCA Training
  • Strong experience in a Microsoft 365 GCC or GCC High environment
  • Exceptional attention to detail and ability to follow instructions precisely
  • Strong interest in compliance, security, and regulated IT environments
  • Comfortable working in structured, checklist-driven workflows
  • Willingness to ask questions rather than improvise
  • Strong written communication skills for documentation and tickets
  • Reliability and consistency in task execution
• Preferred (Not Required):
  • MSP experience in structured service environments
  • Technical writing experience
  • Gone through 5 C3PAO assessments

Benefits

• Health Care Plans (Medical, Dental & Vision)
• Retirement Plan and Matching (Simple IRA)
• Paid Time Off (Vacation, Sick, and Public Holidays)
• Full-Remote Work from Home

Salary Range: $100,000+