ZipRecruiter

Log In

1

Cgrc Jobs in Ohio (NOW HIRING)

Astrion

Cybersecurity (ISSM)

Dayton, OH · On-site

It is required for the contractor to have CAP (Certified Authorization Professional) certification, Now CGRC (Certified in Governance, Risk, & Compliance) and it is highly recommended to have CISSP ...

Astrion

Cybersecurity (ISSM)

Dayton, OH

$125K - $155K/yr

It is required for the contractor to have CAP (Certified Authorization Professional) certification, Now CGRC (Certified in Governance, Risk, & Compliance) and it is highly recommended to have CISSP ...

All JobsCgrc JobsCgrc Jobs in Ohio

Cgrc information

What is the 3 month rule for jobs?

The 3 month rule for jobs, including roles like CGRC, typically refers to a probationary period of three months during which an employee's performance and fit for the role are evaluated. This period allows employers to assess skills, adapt to the work environment, and determine if the employee will be retained or extended benefits. It is common in many organizations to set this timeframe for initial performance reviews and potential confirmation of employment.

What are CGRC professionals?

CGRC professionals, or Certified in Governance, Risk and Compliance, are experts who help organizations manage risk, ensure regulatory compliance, and establish effective governance frameworks. They analyze processes, identify potential risks, and develop policies to maintain compliance with laws and industry standards. CGRC certification, previously known as CAP (Certified Authorization Professional), is offered by (ISC)² and validates knowledge in governance, risk management, and compliance best practices. These professionals often work in cybersecurity, IT, or regulatory roles across various industries.

Is GRC an entry level job?

GRC (Governance, Risk, and Compliance) roles can be entry-level or require experience depending on the specific position. Entry-level GRC jobs typically focus on basic compliance tasks and may require foundational knowledge of cybersecurity or risk management, often supported by certifications like CISA or CISSP. More advanced roles involve managing complex frameworks and usually demand prior experience in security or audit functions.

What are the key skills and qualifications needed to thrive as a Cybersecurity Governance, Risk, and Compliance (CGRC) professional, and why are they important?

To thrive as a CGRC professional, you need a solid understanding of cybersecurity frameworks, risk management, and regulatory compliance, typically supported by a relevant degree and certifications such as CISSP, CISA, or CGRC (formerly CAP). Familiarity with GRC platforms like Archer, ServiceNow GRC, or RSA, as well as knowledge of NIST, ISO, or HIPAA standards, is commonly required. Strong analytical skills, attention to detail, and effective communication are crucial soft skills for interpreting regulations and collaborating across teams. These competencies ensure organizations remain secure and compliant, minimizing risk and avoiding costly penalties.

What is the difference between Cgrc vs Compliance Analyst?

AspectCgrcCompliance Analyst
CertificationsCertifications like CFE, CISA, or CMMC often preferredCertifications such as CCEP, CISA, or CIA common
Work EnvironmentTypically in cybersecurity, risk management, or compliance teams within organizationsUsually in corporate compliance departments, auditing firms, or regulatory agencies
Industry UsageUsed in industries like finance, healthcare, and government for cybersecurity and risk managementCommon across various industries for regulatory compliance and risk assessment

The Cgrc (Certified Government Risk Compliance) focuses on government-specific regulations and cybersecurity risk management, while a Compliance Analyst generally handles broader regulatory compliance across industries. Both roles require understanding of compliance frameworks, but Cgrc emphasizes government standards and cybersecurity, making it more specialized in those areas.

What jobs pay 500,000 a year in the US?

High-paying jobs that can reach or exceed $500,000 annually in the US include executive roles such as CEOs and CFOs, top-tier surgeons, specialized attorneys, and successful entrepreneurs. These positions often require advanced degrees, extensive experience, leadership skills, and sometimes ownership or equity stakes in companies.

What are some common challenges CGRC professionals face when managing compliance across multiple frameworks?

CGRC (Cybersecurity Governance, Risk, and Compliance) professionals often encounter the challenge of aligning organizational policies with the requirements of various regulatory frameworks, such as NIST, ISO 27001, and GDPR. This can involve interpreting overlapping or conflicting controls and ensuring consistent documentation and reporting. Additionally, they must facilitate communication and collaboration between IT, legal, and business teams to ensure all stakeholders understand and meet compliance obligations. Keeping up with the evolving regulatory landscape and adapting internal processes accordingly is also a key aspect of the role.

What is the best job for someone with OCD?

For a role like CGRC, which involves compliance, risk management, and detailed documentation, individuals with OCD may find comfort in structured, predictable tasks that require attention to detail. Jobs that involve routine procedures, clear guidelines, and minimal unexpected changes can help manage symptoms effectively. Certifications in relevant fields and a stable work environment can also support success in such roles.
What are popular job titles related to Cgrc jobs in Ohio? For Cgrc jobs in Ohio, the most frequently searched job titles are:
What job categories do people searching Cgrc jobs in Ohio look for? The top searched job categories for Cgrc jobs in Ohio are:
Cgrc jobs near you
Infographic showing various Cgrc job openings in Ohio as of July 2026, with employment types broken down into 81% Full Time, 7% Part Time, and 12% Contract. Highlights an 90% Physical, 3% Hybrid, and 7% Remote job distribution.

Compliance Manager

The Armor Group, Inc.

Mason, OH • On-site

Full-time

Re-posted 6 days ago

Job description

Position Summary
The Compliance Manager is the organizational owner of the company’s regulatory compliance program, with primary accountability for achieving and maintaining Cybersecurity Maturity Model Certification (CMMC), ensuring alignment with NIST SP 800-171 and applicable DFARS clauses, and managing the identification and tracking of CUI-related contractual obligations across the business.
This is a leadership role that sits at the intersection of IT, legal, contracts, operations, and executive management. The Compliance Manager does not just track requirements — they drive the organization’s compliance posture, build a culture of security awareness, and ensure the company is audit-ready at all times. They are the primary point of accountability when a C3PAO assessor walks in the door.
Key Responsibilities:
Compliance Program Ownership
  • Own and continuously improve the organization’s end-to-end compliance program encompassing CMMC, NIST SP 800-171, DFARS 252.204-7012/7019/7020/7021, and related federal regulations
  • Develop, maintain, and enforce the organization’s information security policies, standards, and procedures; ensure they are reviewed at least annually and updated in response to regulatory changes
  • Maintain the System Security Plan (SSP), Plan of Action amp; Milestones (POA amp;M), and all supporting compliance artifacts; ensure they are current, accurate, and audit-ready at all times
  • Own the organization’s risk register; conduct periodic risk assessments and drive remediation planning in partnership with IT and operational leadership
  • Track CMMC rulemaking, NIST guidance updates, and DoD policy changes; brief leadership on implications and required organizational responses
  • Establish and report on compliance program metrics and key performance indicators (KPIs) to senior leadership on a regular cadence
CMMC Assessment Readiness
  • Lead all activities related to preparation for and completion of CMMC third-party assessments (C3PAO); serve as the organization’s primary point of contact with assessors
  • Conduct and document internal gap assessments against NIST SP 800-171 and CMMC practice requirements; maintain evidence packages for all 110 practices
  • Coordinate with IT to ensure that technical controls are implemented, documented, and generating the evidence required for a successful assessment
  • Manage the POA amp;M lifecycle: identify gaps, assign remediation owners, set milestone dates, track progress, and verify closure
  • Prepare staff for assessor interviews; conduct mock assessments and tabletop exercises to identify weaknesses before formal assessment
  • Maintain post-assessment continuous compliance, ensuring controls do not degrade between certification cycles
CUI Program Management
  • Define, document, and maintain the organization’s CUI scope: categories of CUI handled, all roles and individuals who access CUI, and all systems and locations where CUI is stored, processed, or transmitted
  • Maintain the assessment boundary documentation and data flow diagrams in coordination with IT
  • Develop and enforce CUI handling procedures, marking standards, and destruction requirements across all departments
  • Conduct periodic CUI audits to verify that staff are handling and marking CUI correctly in both digital and physical form
  • Serve as the internal resource for CUI classification questions from program managers, engineers, procurement, and other staff
Preferred Education amp; Certification(s):
  • Bachelor's Degree, preferably in Cybersecurity, Information Technology or similar field
  • Certified CMMC Professional (CCP)
  • Certified CMMC Assessor (CCA)
  • Project Management Professional (PMP)
  • Certified Authorization Professional (CAP / CGRC)

Apply