79 grc manager jobs at 47 companies in Frederick, MD
2mo
Save
Mark Applied
Hide
2mo
The GRC Process Architect
Arlington, Virginia, United States
$91k-$185k/yrRemoteFull Time
Accenture Federal ServicesNYSE: ACN: Provides technology and consulting services to U.S. federal agencies.
5+ YOE5+ years in business process design or process architecture; knowledge of CMMC/NIST 800-171; strong GRC experience; IT Change Management and data governance; AI/automation workflow experience.
Celestial Innovations Group: Provides cybersecurity and cloud infrastructure services to government agencies.
5+ YOEMinimum 5 years product management with 2+ years in security/compliance; experience with GRC automation, federal security frameworks (FISMA, NIST, FedRAMP), Agile/DevOps collaboration, strong communication and stakeholder management.
Risk Consulting - Risk Technology - Oracle GRC - Manager (New York, NY, US, 10001-8604)
New York or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or North Carolina or Philadelphia or Portland or San Francisco or Seattle or Tampa
$150k-$260k/yrHybridFull Time
EY: Global firm providing audit, tax, and professional consulting services.
5+ YOEBachelor's or master's degree with ~5 years related experience; Oracle security/controls and controls testing experience; strong project management, client service, leadership, communication, analytical skills; valid US driver’s license and passport; willing to travel.
CyberLinx Solutions: Provides specialized cybersecurity and IT services to federal agencies.
8+ YOE3+ MgmtBachelor's in a related field, 8+ years in cybersecurity with 3+ years of GRC leadership, strong knowledge of NIST CSF/RMF and NIST SP 800-53/800-171, audit/compliance experience, and executive communication skills.
OracleNYSE: ORCL: Provides cloud infrastructure and enterprise software for global businesses.
6+ YOE5+ MgmtActive Top Secret clearance, 6+ years relevant experience with 5+ years leadership, expertise in NIST 800-53 Rev 5, experience with GRC tools (Xacta, eMASS), cloud environments, automation, and strong executive-level communication.
Steampunk: Provides digital transformation and IT consulting for federal agencies.
7+ YOELocal to Washington, DC; must be able to obtain Public Trust clearance. Requires project management certification (PMP/PRINCE2/PMI-ACP/CSM/SAFe SPC or equivalent) and 7+ years experience (Master's+7, Bachelor's+10, or 16 years without degree). Familiarity with GRC, FISMA, FedRAMP, NIST 800-53, CTEM, DevSecOps, and federal IT programs.
WorkdayNASDAQ: WDAY: Provides cloud-based software for financial and human capital management.
12+ YOE12+ years GRC experience, 7+ years implementing GRC tools, BS/MS in CS/InfoSec/MIS or equivalent, expert TPRM and risk analysis, stakeholder management, and preferred advanced security certifications.
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
8+ YOE8+ years in ISSO/SCA/ISSE/ISSM roles; experience configuring and automating GRC platforms (ServiceNow, Archer, Xacta, eMASS); strong process/change management, policy-to-implementation translation, and knowledge of NIST RMF/FISMA/FedRAMP; U.S. citizenship required.
ServiceNow, Archer, RSA Archer, Xacta, Telos Xacta, eMASS, CSAM, API
Principal Associate, Process Manager - Client Engagement & Issue Resolution
Houston or McLean or Richmond or Chicago
$99k-$113k/yrOnsiteFull Time
Capital OneNYSE: COF: Financial services offering credit cards, banking, and loans.
3+ YOEHigh school diploma/GED; 3+ years in project/process management or engineering with data analysis; 3+ years in complaint resolution/remediation; 2+ years payments experience; experience with ServiceNow/GRC, AI automation, data analysis, stakeholder management, and process documentation.
Steampunk: Design-led federal technology consulting and innovation services firm.
7+ YOELead RiskOps program delivery for federal cybersecurity: oversee roadmap, coordinate cross-functional teams, manage schedules/backlogs, drive process improvements, and produce status reports and KPIs.
Tharros: Provides specialized cybersecurity defense and vulnerability research services.
15+ YOEActive TS/SCI, 15+ years managing large cybersecurity/IT programs, PMP and CISSP or CISM, experience with cybersecurity program management, strong customer-facing and communication skills.
RMF, Assessment and Authorization (A&A), DevSecOps, Zero Trust, GRC, COMSEC
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
5+ YOE5+ years compliance, audit, or risk management experience; Bachelor’s degree or equivalent required; deep knowledge of COSO 2013, SEC/PCAOB, ITGCs, SOX scoping, control design, testing, remediation, and GRC platforms.
Red Cell Partners: Incubating technology companies in healthcare and national security sectors.
10+ YOE10+ years in security assurance/GRC with end-to-end ownership of SOC 2 and HIPAA programs, experience with audits, risk assessments, policy and control design, continuous monitoring, vendor risk, and customer-facing security reviews; familiarity with modern GRC platforms and LLMs.
SOC 2, HIPAA, ISO 27001, FedRAMP, NIST 800-53, NIST CSF, CMMC, ISO 42001, DoD RMF, HITRUST, StateRAMP, Drata, ServiceNow IRM, Vanta, Hyperproof, OneTrust, LLMs
Trase Systems: Provides an enterprise platform for deploying autonomous AI agents.
10+ YOE10+ years in security assurance/GRC with hands-on SOC 2 and HIPAA program ownership, experience with risk management, control design, continuous monitoring, audits, and working with LLMs/AI agents.
Drata, ServiceNow IRM, Vanta, Hyperproof, OneTrust, LLMs, AI agents
The Cadmus Group: Provides strategic and technical advisory services for complex infrastructure.
7+ YOEBA/BS and 7+ years product management experience supporting Enterprise Risk/GRC; experience with ServiceNow IRM or comparable GRC tools; Agile delivery experience; strong stakeholder, communication, and decision-making skills; U.S. work eligibility required.
Compliance Manager, Corporate Compliance - CoStar Group - Arlington, VA
Arlington, Virginia, United States
OnsiteFull Time
CoStar GroupNASDAQ: CSGP: Global provider of commercial and residential real estate data.
5+ YOEBachelor's degree required; 5+ years regulatory compliance and project management experience; strong analytical, communication, and MS Office skills; experience with compliance frameworks and GRC platforms preferred.
Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Osano, OneTrust, Descartes