Sr Manager - IT Governance, Risk, and Compliance
Core
Lead and manage the IT Governance, Risk, and Compliance (GRC) team, driving the development, maintenance, and execution of the GRC framework to ensure compliance with global regulations and mature the organization's cybersecurity posture.
Role type
Senior Manager, IT GRC
Builds
Cybersecurity GRC framework, policies, standards, and procedures
Domain
IT Security / Cybersecurity / Compliance
Required skills
IT GRC program leadership, risk assessment and mitigation, IT control design review and validation, audit coordination, third-party risk management, strategic program management, talent management, business acumen, project management, knowledge of security frameworks (NIST CSF, ISO 27001, CIS Controls), knowledge of regulatory requirements (SOX, SEC, GDPR, HIPAA, CMMC)
Preferred skills
Experience building IT GRC function in global organization, experience building IT Third-Party Risk function in global organization, industry recognized certifications (CRISC, CISA, CISSP, CISM, CGEIT), experience with GRC software platforms (Vanta, ServiceNow GRC)
Responsibilities
Develop and maintain Cybersecurity GRC framework, policies, standards, and procedures; Oversee risk mitigation and the IT risk register; Coordinate internal and external cybersecurity audits; Build, coordinate and oversee Third-Party risk management; Lead the execution of the multi-year GRC Program roadmap; Evaluate potential and drive succession planning for the team
Seniority
Senior Manager, hands-on leadership