{"id":2000903,"url":"https://alion.io/job/neumo-manager-information-security-grc-remote","title":"Manager, Information Security (GRC) (Remote)","company":{"id":2482496,"name":"Neumo","domain":"neumo.com","url":"https://alion.io/company/neumo","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":{"grade":"B","score":75,"open_postings":11,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":111000,"max_usd":216000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1121},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"LLM","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"ServiceNow","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-08-20T15:44:00Z","employer_posted_date":"2026-08-20","last_verified_at":"2026-10-12T22:47:48Z","board_verified":true,"closed_at":null,"days_open":53,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":53},"description":"Job Summary:\nWe are seeking a Manager, Information Security (GRC) to own and mature Neumo's Governance, Risk, and Compliance program. This role is critical to maintaining our SOC 1, SOC 2, and PCI certifications and to raising our overall information security maturity. You will build the foundation for data governance, risk acceptance and exceptions processes, and a recurring cadence of monthly, quarterly, and annual risk mitigation. This is a hands-on leadership role: you will manage 1-2 direct reports while personally driving audits, risk assessments, and control automation, and participate in incident management alongside the broader security team.\nYou will be the connective tissue between security engineering, legal, engineering, and executive leadership: translating regulatory and contractual requirements into practical controls, and translating control performance into risk language leadership can act on.\nThis role directly protects Neumo's ability to do business: Our certifications are foundational to customer trust and revenue. You will have the mandate to modernize how we manage risk and compliance, including building automation and AI-driven workflows that scale the program without scaling headcount linearly.\nDuties and Responsibilities:\nLeadership & Program Ownership\nOwn and execute Neumo's GRC strategy and roadmap, in partnership with the CISO.\nManage, mentor, and grow 1-2 direct reports supporting compliance, risk, and audit activities.\nSet the foundation for data governance: data classification, ownership, retention, and handling standards.\nBuild and maintain the risk register; lead monthly, quarterly, and annual risk mitigation cycles.\nOwn the risk acceptance and policy exception process, including documentation, approval workflows, and periodic review.\nReport on compliance posture, audit status, and risk trends to executive stakeholders and the board as needed.\nCompliance & Audit Management\nOwn end-to-end readiness and execution for SOC 1, SOC 2, and PCI DSS audits, including evidence collection, auditor coordination, and remediation tracking.\nMaintain and continuously improve the internal control framework mapped to SOC 1/2, PCI, and other applicable frameworks (e.g., ISO 27001, NIST CSF).\nTrack control ownership, testing cadence, and control health across the organization using the GRC platform and Jira.\nPartner with engineering and IT teams to close control gaps and drive remediation of audit findings within SLA.\nRisk, Automation & Cross-Functional Work\nDesign and implement control automation to reduce manual evidence collection and continuous control monitoring (CCM).\nLeverage AI/LLM tooling to accelerate evidence review, policy drafting, control testing, and risk analysis, with appropriate human oversight.\nParticipate in incident management as the GRC/risk representative: assessing regulatory and contractual impact and ensuring proper documentation.\nManage third-party/vendor risk assessments and questionnaires (customer security questionnaires, vendor due diligence).\nPartner with Legal and Privacy on data protection, regulatory, and contractual compliance requirements.\n\nEducation and Experience:\n6+ years of experience in GRC, information security compliance, or IT audit, including experience managing or mentoring others.\nDirect experience owning SOC 1, SOC 2, and PCI DSS compliance programs end-to-end, including audit management.\nHands-on experience with GRC platforms (e.g., Vanta, Drata, ServiceNow GRC, OneTrust, Archer, or similar).\nExperience building risk management programs: risk registers, risk acceptance/exception processes, and recurring risk mitigation cadences.\nFoundational experience with data governance concepts (classification, ownership, retention).\nRelevant certifications (e.g., CISA, CRISC, CISSP, CISM) are a plus but not required.\n\nKnowledge, Skills and Abilities:\nStrong working knowledge of Jira for control tracking, remediation workflows, and cross-team coordination.\nDemonstrated ability to build or deploy control automation and continuous control monitoring.\nComfort leveraging AI tools to scale GRC operations (evidence review, policy generation, risk analysis).\nAbility to participate effectively in incident management, translating technical incidents into risk and compliance impact.\nExcellent written and verbal communication skills; able to translate technical and regulatory detail for executive audiences.\n\nWork Environment:\nOffice setting with a moderate noise level.\nThe employee will work at an individual workstation, using a telephone and computer.\nPeriodic flexibility outside standard business hours may be required to support audits or incident response.\n\nPhysical Demands:\nMust be able to remain seated for extended periods.\nRegular use of a computer and other office machinery, such as printers and copy machines.\nOccasional movement around the office.\nFrequent communication via telephone.\nNeumo Summary:\nWith the backing of four decades of public sector expertise and corporate capability, Neumo has successfully supported government services. Neumo was honored and recognized for four (4) consecutive years as a GovTech 100 Company representing the top 100 companies focused on making a difference in and selling to state and local government agencies across the United States.\nNeumo is committed to helping communities thrive and brings a wealth of experience combined with innovation. Today, Neumo offers more administrative and financial support to government officials than any other organization. And with a responsive, client-focused approach, we foster partnerships that give our customers the certainty they need to accomplish more.\nNeumo offers a competitive benefits and compensation package and are looking for team members who will thrive in our dynamic environment.\nNeumo is an Equal Opportunity Employer. Selection for a position will be made without regard to race, religion, national origin, sex, political affiliation, marital status, non-disqualifying physical handicap, and age.","description_format":"text","description_chars":6033,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Government"],"lifecycle":[{"event":"open","at":"2026-10-07T11:27:25Z"}],"visa":[],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.435,"p_room":0.45,"age_days":53,"expected_fill_days":28,"reasons":["conf:6","stale_co","velocity","win:tail"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/neumo-manager-information-security-grc-remote","json_url":"https://alion.io/job/neumo-manager-information-security-grc-remote.json","meta":{"generated_at":"2026-10-13T12:58:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20158,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2482496},"rest":"https://alion.io/mcp/rest/get_company?id=2482496"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fneumo-manager-information-security-grc-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fneumo-manager-information-security-grc-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fneumo-manager-information-security-grc-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/neumo-manager-information-security-grc-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fneumo-manager-information-security-grc-remote"}]}