Governance, Risk, and Compliance (GRC) Manager
Core
Lead cybersecurity governance, risk management, policy compliance, and audit readiness across enterprise technology environments to align security controls with regulatory requirements and business objectives.
Role type
Senior GRC Manager (Cybersecurity & Risk)
Builds
Security policies, risk registers, compliance reports, and audit-ready evidence for enterprise technology estates.
Domain
Financial Services / Insurance / Cybersecurity
Required skills
Cybersecurity governance, Risk management, Policy compliance, Audit readiness, Regulatory frameworks, Third-party risk management, Business continuity planning, Risk reporting, Control assessment, SDLC security integration
Preferred skills
CISA, CISM, CRISC, CISSP, CGRC certifications, NIST CSF, ISO 27001, COBIT, GRC platforms, Cloud security risk assessment
Technologies
NIST Cybersecurity Framework, NIST SP 800-53, ISO 27001, COBIT, GRC platforms
Responsibilities
Develop and maintain cybersecurity policies and procedures; Lead risk assessments across applications, cloud, and infrastructure; Manage policy compliance and audit readiness activities; Evaluate effectiveness of cybersecurity controls; Partner with technical teams to implement controls in SDLC; Oversee third-party risk management and vendor security assessments; Establish processes for tracking risk remediation and compliance findings; Support governance forums and architecture review meetings; Oversee business continuity and disaster recovery governance; Prepare risk and compliance reports for executive leadership; Monitor emerging threats and regulatory developments; Identify opportunities to improve security governance; Collaborate with stakeholders to resolve risks; Supervise and develop GRC function personnel.
Seniority
Senior, hands-on IC with leadership responsibilities
