Manager, GRC Engineering
Remote
Job Summary
Own executive client account management by acting as the primary point of contact across client portfolios, cultivating trusted executive relationships, and ensuring continuous delivery alignment. Lead end-to-end compliance engagements by guiding clients through complete compliance lifecycles from initial kickoff to final certification with proactive communication. Manage complex account escalations by resolving high-stakes client issues with urgency and composure, applying structured solutions that safeguard retention and confidence. Deliver strategic compliance guidance by interpreting complex regulatory criteria into actionable, business-aligned technical controls. Direct and develop engineering pods by managing, mentoring, and coaching a dedicated team of 3 to 5 analysts to enforce accountability and maintain strict delivery standards. Architect technical GRC frameworks by authoring and aligning corporate security policies, procedures, and technical controls across SOC 2, ISO 27001, HIPAA, and PCI DSS. Execute multi-cloud certification projects by leading complex SOC 2 and ISO 27001 implementation motions across enterprise AWS, GCP, and Azure environments. Leverage modern compliance automation by utilizing enterprise automation platforms such as Drata, Vanta, and Secureframe to track readiness metrics and maintain continuous audit posture.
Required Qualifications
- Proven client relationship manager - background in direct account ownership, adept at facilitating high-stakes client meetings and navigating challenging conversations with poise
- Experienced GRC engineering leader - bring 5+ years of direct experience leading technical teams, managing pod throughput, and coaching individual performers
- Technical compliance expert - hands-on execution history building and managing enterprise compliance programs aligned with SOC 2 and ISO 27001 frameworks
- Cloud control architect - strong practical knowledge implementing technical security controls within AWS, GCP, or Azure environments
- Multi-project delivery operator - proven track record of managing multiple concurrent technical compliance engagements without sacrificing execution quality or client satisfaction
- Autonomous technical operator - self-directed practitioner holding a Bachelor's degree in IT, Cybersecurity, or a related technical discipline, operating with exceptional initiative
- Excellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams
- A reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration
- Commitment to working a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time (ET)
- Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed
- Candidates must participate in live video interviews throughout the hiring process with camera on
- Employment is contingent upon successful completion of identity verification and background screening
- Applicants must be authorized to work in the U.S. without the need for visa sponsorship now or in the future
Desired Qualifications
- Big 4 consulting tenure - background in risk advisory, technical assurance, or security consulting at a Big 4 or elite professional services firm
- Active industry certifications - credentialed professional holding active CISA, CISSP, CISM, or equivalent security designations
- Specialized GRC advisory history - documented success managing external technical clients within specialized cybersecurity consulting environments
- Expanded framework mastery - deep operational familiarity with additional regulatory and security standards including HITRUST, PCI DSS, NIST, GDPR, and HIPAA
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.