Senior Compliance / GRC Manager at Agency Cybersecurity

New York, New York, United States -

Full Time

Start Date

Immediate

Expiry Date

21 Mar, 26

Salary

175000.0

Posted On

21 Dec, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Compliance, Cybersecurity, Project Management, Client Relationship Management, Risk Analysis, Audit Management, SOC 2, ISO 27001, HIPAA, Documentation, Team Management, Analytical Skills, Problem Solving, Communication, Regulatory Standards, Compliance Frameworks

Industry

Computer and Network Security

Description

Location: 100% On-Site in New York, NY Position Type: Full-Time Salaried Experience Level: Senior Manager Level Compensation: $135,000 to $175,000 total comp, including annual bonus and benefits. Job Summary: Agency Cybersecurity is seeking a Senior Compliance / GRC Manager to join our fast-growing team. This senior-level role is ideal for an experienced compliance professional who has led cybersecurity and compliance engagements from start to finish in a consulting environment. You will be responsible for managing multiple client relationships, leading audits end-to-end, and delivering exceptional cybersecurity compliance services. Key Responsibilities: Serve as the primary point of contact for multiple cybersecurity and compliance client engagements. Lead and manage SOC 2, ISO 27001, HIPAA, and other compliance framework audits from initiation through completion. Own the delivery of multiple simultaneous client projects, ensuring timely and high-quality results. Conduct gap assessments, risk analyses, and compliance readiness reviews for clients Develop and implement comprehensive compliance strategies and remediation plans Coordinate with external auditors and manage all aspects of the audit process Build and maintain strong client relationships, serving as a trusted advisor on compliance matters Guide clients through complex compliance requirements and regulatory standards Create detailed compliance documentation, policies, procedures, and control frameworks Manage a team of 10 junior members Stay current on evolving compliance frameworks, regulations, and industry standards Required Qualifications: Minimum 4+ years of consulting experience at a cybersecurity and compliance consulting firm Proven track record as primary point of contact on multiple client engagements Demonstrated experience owning delivery for multiple clients simultaneously Extensive experience leading compliance audits end-to-end (SOC 2, ISO 27001, HIPAA, etc.) Deep domain expertise with 40+ SOC 2 engagements completed Strong understanding of compliance frameworks, including SOC 2, ISO 27001, HIPAA, NIST, and related standards Excellent project management skills withthe ability to manage multiple concurrent engagements Outstanding client-facing communication and relationship management skills Strong analytical and problem-solving abilities Experience developing compliance documentation, policies, and procedures Bachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent experience) Preferred Qualifications: Professional certifications such as CISSP, CISA, CISM, or similar Experience with GRC platforms and compliance automation tools (Vanta, Drata, etc) Background working with startup or high-growth technology companies Experience with additional frameworks such as FedRAMP, PCI-DSS, or GDPR Previous experience at a Big Four firm or top-tier cybersecurity consultancy Strong technical background in information security and cloud infrastructure What We Offer: Competitive compensation: $135,000 to $175,000 total comp, including annual bonus and benefits Opportunity to work with diverse clients across industries Collaborative team environment with a fast-paced startup team Exposure to cutting-edge compliance technology and methodologies Career growth opportunities in a fast-growing Work with top-tier clients backed by leading investors

Responsibilities

The Senior Compliance / GRC Manager will serve as the primary point of contact for multiple client engagements and lead compliance audits from initiation through completion. They will also develop compliance strategies and manage a team of junior members.