Apply on Employer Site

Mach Industries · 1 month ago

Governance, Risk, and Compliance Lead (GRC)

Huntington Beach

Full-time

Onsite

Senior Level

$120K/yr - $190K/yr

7+ years exp

Mach Industries is a rapidly growing defense technology company focused on developing next-generation autonomous defense platforms. The Governance, Risk, and Compliance Lead (GRC) will drive security and compliance initiatives, manage key certifications, and safeguard the company’s systems and data.

Drone ManagementIndustrialInfrastructureManufacturingNational Security

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Develop and maintain System Security Plans (SSPs) and supporting documentation aligned with NIST 800-171 and CMMC practices

Conduct regular security control assessments, perform gap analyses, and update Plans of Action and Milestones (POA&Ms)

Lead audit preparation, execution, and remediation efforts for certifications such as CMMC, ISO 27001, and other industry-aligned standards

Collaborate with cross-functional teams (Security, IT, Legal, Engineering) to implement and track control requirements

Monitor regulatory obligations and maintain audit readiness through continuous assessment and documentation

Collaborate with engineering and manufacturing teams to establish and enforce secure handling and operational processes

Recommend remediation strategy, track remediation efforts, and collaborate closely with IT, DevOps, and business teams

Conduct comprehensive cybersecurity audits to ensure compliance with CMMC, DFARS 7012, NIST 800-171, STIG, and other relevant regulations

Analyze and assess various data types, including Controlled Unclassified Information (CUI), Controlled Technical Information (CTI), Federal Contract Information (FCI), International Traffic in Arms Regulations (ITAR), and Export Administration Regulation (EAR99)

Support the development and rollout of security awareness training to ensure users understand responsibilities and best practices

Ensure training completion and maintain accurate compliance records; other duties as assigned

Qualification

CybersecurityGRC program experienceISO 27001NIST 800-171Cybersecurity certificationsAudit managementRisk assessmentsTechnical backgroundCommunication skillsLeadership