Governance, Risk & Compliance (GRC) Manager

Responsibilities

• Own Northwood's compliance program across CMMC Level 2, FedRAMP, SOC 2 Type II, and ITAR
• Maintain System Security Plans (SSP), POA&Ms, and associated compliance documentation
• Manage third-party assessments and serve as the primary liaison for auditors and government customers
• Build and maintain the enterprise risk management program and risk register
• Develop and enforce security policies and CUI handling procedures

Requirements

• 5+ years in a GRC role within a regulated environment
• Deep knowledge of CMMC Level 2, NIST SP 800-171, and FedRAMP
• Experience with SOC 2 Type II audits and ITAR compliance
• Ability to obtain and maintain a TS/SCI clearance
• U.S. citizenship or lawful permanent resident status

Preferred Qualifications

• Active TS clearance or higher
• Experience within the Defense Industrial Base (DIB)
• Professional certifications such as CISSP, CISM, or CISA

About the Company

Northwood is a modern space infrastructure company building a global network of phased array ground stations to enable real-time, reliable communication for satellite missions including national security and disaster response.