Chaos Industries
GRC Manager (Governance, Risk & Compliance Manager)
$132K–$181K
El Segundo, California, United States +1 · Manager · Full-time · Posted Aug 26, 2026
- Location
- El Segundo, California, United States
Los Angeles, California, United States - Experience
- Minimum of 5 years hands-on GRC or compliance experience combined with prior experience in a DoD environment or military service.
- Education
- Bachelor’s degree or equivalent experience in computer science, cybersecurity, information security, Information Technology, Information Assurance, or a related field, or equivalent practical experience.
About the job
Own and mature CHAOS Industries’ cybersecurity GRC program, building tailored governance, risk, controls, policies, audit processes, and cross-functional accountability.
What you'll do
- Lead risk assessments and maintain the centralized risk register, remediation plans, and risk reporting.
- Design and maintain the company’s control framework, policies, security-by-design practices, and GRC tooling and workflows.
- Coordinate third-party and certification audits, customer and supplier cybersecurity reviews, evidence collection, and remediation with partner teams.
What they ask for
- Bachelor’s degree or equivalent experience in a related field, or equivalent practical experience.
- Experience managing teams.
- Deep knowledge of NIST CSF, NIST RMF, the ISO/IEC 27000 series, UK Cyber Essentials, CMMC/NIST 800-171, and NIST 800-53; familiarity with OT/ICS security concepts.
- Direct support of a third-party or certification audit, and experience performing or supporting a formal risk assessment using a defined methodology.
Nice to have
- Experience supporting third-party audits in a cloud-centric environment.
- Experience building or materially contributing to a risk register, control framework, or compliance program; policy-writing experience for non-security audiences.
Pay
$132,000 - $181,000 USD (base salary)
Tools
NIST CSF, NIST RMF, ISO/IEC 27000 series, UK Cyber Essentials, CMMC/NIST 800-171, NIST 800-53, OT/ICS
Model-written summary · the original posting is authoritative