> Markdown version of [/jobs/ext/442880-grc-manager](https://www.wearedevelopers.com/jobs/ext/442880-grc-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Manager - **Company:** CliftonLarsonAllen LLP - **Location:** West Hartford, CT, United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Systems, Information Technology Audit, IT Management, Cloud Platform System, Information Technology, Hardware Infrastructure, Epic ECSA, CIS Benchmarks - **Published:** June 4, 2026 - **Apply:** https://www.careerjet.com/jobad/us5498176cc5abfb76b34262ae8c857a36 ## About the Role 7 years of relevant experience required. Experience working within an internal audit or IT governance, risk, and compliance function preferred. Education: Bachelor's degree is required. (Combination of relevant experience, education, and training may be accepted in lieu of degree.). Degree in Computer Science, Information Technology, Information Assurance or related field preferred. Certifications / Licenses: Two industry recognized certifications required, such as: * CISA or equivalent (GSEC, ECSA, SSCP) * CompTIA certs - like Security + * Privacy Certifications (CDPSE) * CISSP or equivalent (CISM) * CRISC Additional Requirements: * At least two (2) years in a managerial or team lead role. * In-depth knowledge of cybersecurity frameworks and leading practices, which may include NIST Cybersecurity Framework, NIST 800 Series Special Publications, and ISO 27001, Secure Controls Framework, CIS Controls, and various other derivatives specific to industries. * Strong leadership, organizational, and project management skills. * Excellent written and verbal communication skills, with the ability to present complex information clearly to both technical and non-technical audiences. * Experience with cybersecurity assessments, audits, and consulting engagements which may include customized deliverables. * Experience working with financial services, government, manufacturing, healthcare or other regulated industries is a plus. * Experience working with and evaluating traditional on-premise infrastructure, as well as hybrid or cloud environments. * Ability to maintain compliance with continuing professional education. ## Description CliftonLarsonAllen, LLP (CLA) is seeking an experienced and dynamic IT and Cybersecurity Controls Consultant Manager to lead a team of IT audit and cybersecurity professionals in the delivery of consulting and advisory services. This role is critical in ensuring clients' information systems are secured against reasonably foreseeable risks and threats, while complying with relevant industry, federal, state, and local government security standards and regulations, safeguarding sensitive data, and systems. This is a Managerial position but will also be tasked with hands-on project execution work for larger complex clients, as appropriate. Key Responsibilities * Lead a multidisciplinary team of IT auditors, IT security professionals, and compliance analysts. * Develop, implement, and maintain methodologies and schedules to ensure timely completion of cybersecurity governance, risk and compliance framework assessments and reporting. * Serve as the primary point of contact between the CLA and clients as assigned. * Review and interpret regulations, including cybersecurity frameworks industry directives, and other applicable policies. * Identify, assess, and communicate risks and vulnerabilities in information systems, and support mitigation planning. * Prepare and present deliverables, services, reports, findings and recommendations to client leadership. * Perform quality review on client deliverables to ensure documentation and evidence collection meets CLA standards and is ready for inspection at all times. * Provide training and guidance to CLA staff on applicable regulatory requirements and best practices for information security. * Provide assistance as needed in business development, proposals, thought leadership and other market-facing opportunities. ## Related Videos - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [From developer to manager – what does it take to become an engineering manager?](https://www.wearedevelopers.com/magazine/42-from-developer-to-manager-what-does-it-take-to-become-an-engineering-manager) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)