Senior GRC Manager

For our client, we are seeking a Senior GRC Manager to join the team of a leader in the Aerospace & Defense space. This role will lead governance, risk, and compliance efforts that support a complex, security-focused environment. You will own the Information Security Management Program, strengthen compliance posture, and partner closely with technical and executive stakeholders to keep risk management practical and effective. The position also plays a key role in audits, third-party risk oversight, and aligning control requirements with day-to-day operations. Location: Remote - US based candidates only, no visa sponsorship available Compensation: $130,000 – $150,000 annually Responsibilities Maintain the Information Security Management Program and overall compliance posture Support audits and assessments for HIPAA, GDPR, HITRUST, and SOC 2 certifications Manage the risk register, with emphasis on third-party and vendor risks Keep control mapping and audit evidence organized and up to date Assist with incident response planning alongside IT and IT security leadership Collaborate with security engineers and DevSecOps teams to implement compliance requirements in system operations Serve as the primary compliance resource for cross-functional teams across the organization Qualifications 5+ years of experience in GRC, IT compliance, or information security compliance, preferably in a regulated industry Hands-on experience maintaining an Information Security Management Program or similar compliance program Understanding of HIPAA, SOC 2, HITRUST, or GDPR; healthcare experience preferred Experience engaging with external auditors to manage compliance assessments Ability to communicate effectively with technical teams and executive leadership regarding risk and compliance status Strong writing skills to articulate policy language from operational details Highly organized and detail-oriented, with the ability to manage multiple compliance responsibilities Benefits Opportunity to lead a meaningful GRC program integral to the company's operations Collaborative work environment with security engineers and technical leadership Focus on pragmatic risk management rather than bureaucratic compliance procedures Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.