Governance, Risk & Compliance (GRC) Manager

Loenbro is a trusted, long-term construction lifecycle partner to thousands of customers across the U.S. Our market spans all industries, and our service offerings include Critical Electrical, Mechanical & Structural, Soft Crafts, Inspection, Underground Maintenance and Installation, and Fabrication. Our expertise lies in simplifying the complex and establishing long-standing relationships with our partners. We have a national presence but a local approach—every customer benefits from our capabilities and our care.

• 10+ years of experience in Governance, Risk & Compliance (GRC), Information Security, Risk Management, or related cybersecurity functions.
• 3+ years of leadership, management, or program ownership experience.
• Required: Direct experience leading or supporting CMMC Level 2 compliance programs.
• Required: Hands-on experience managing SOC 1 and/or SOC 2 audits.
• Required: Experience supporting SOX compliance and IT General Controls (ITGC) testing and remediation.
• Strong understanding of NIST SP 800-171 requirements and cybersecurity control frameworks.
• Experience conducting risk assessments, compliance gap analyses, and remediation planning.
• Experience working with external auditors, assessors, and regulatory stakeholders.
• Experience developing and maintaining security policies, standards, and governance documentation.
• Strong communication, project management, and stakeholder management skills.
• Preferred certifications: CISSP, CISM, CRISC, CISA, CIA, or CGRC.
• Experience in a Defense Industrial Base (DIB) or regulated environment is highly preferred.

The physical demands and work environment described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

• Remote/Home Office: Primarily remote work requiring regular use of computers, virtual collaboration tools, and business applications.
• Collaboration: Regular interaction with HR, IT, Business Systems, application vendors, and business stakeholders through virtual meetings and communication platforms.
• Travel: Occasional travel may be required for company meetings, training, project activities, or other business needs.

This role requires compliance with all applicable safety regulations, personal protective equipment (PPE) requirements, and Loenbro's Environmental Health and Safety (EH&S) policies.