Similar Jobs
See allSenior GRC Analyst
Tines
US
Compliance
ISO 27001
SOC 2
Principal Security Compliance Analyst
Entrust
US
FedRAMP
NIST 800-53
SOC 2
Staff Compliance Analyst
ServiceNow
North America
Security Compliance
Auditing
Risk Assessment
Compliance Manager
Sourcegraph
Global
Compliance
SOC 2
ISO 27001
Governance, Risk & Compliance (GRC) Manager
Loenbro, LLC
US
CMMC
SOC 2
SOX
Responsibilities:
- Own and continuously improve ISO 27001, SOC 2, and GDPR compliance programs, including audit readiness and evidence collection.
- Lead CMMC certification, agency-specific ATOs, and federal/defense compliance efforts, including SSPs and POA&Ms.
- Drive enterprise risk management, vendor risk reviews, security awareness training, and compliance tooling optimization.
Qualifications and Skills:
- 5+ years of GRC, information security compliance, or audit experience with direct ownership of compliance programs.
- Proven experience obtaining and maintaining ATOs, plus strong knowledge of CMMC, NIST SP 800-171, RMF, and STIGs.
- Hands-on Vanta or comparable GRC platform experience, and expertise with GDPR and CPRA.
About the Role:
- This is a fully remote, full-time position focused on taking the compliance portfolio to the next level.
- The role involves leading external audits, serving as DPO, and supporting customer due diligence for federal opportunities.
- Mechanical Orchard values doing the right thing, doing what works, and being kind.
Mechanical Orchard
Mechanical Orchard specializes in safely rewriting the most critical and complex business applications to make them adaptable and resilient. The company is an experienced Agile software consultancy that values cross-functional teams, collective ownership, and continuous improvement, and is bringing joy to beleaguered IT teams.