Manager, Security Governance, Risk, and Compliance
Core
Lead the evolution of cybersecurity risk management and control governance, establishing scalable methodologies for continuous risk visibility and data-driven oversight across a complex technology environment.
Role type
Manager, Security Governance, Risk, and Compliance (GRC)
Builds
Unified enterprise risk management and control governance framework harmonizing global standards (NIST CSF, NIST AI RMF, ISO 27001, ISO 42001) with local/regulatory obligations.
Domain
Cybersecurity, AI Governance, Enterprise Risk Management
Required skills
Cybersecurity governance, Risk assessment methodologies, Control design and testing, Executive reporting, Team leadership, Cross-functional stakeholder management, Cloud infrastructure knowledge, AI governance frameworks
Preferred skills
Java/Spring Boot development, AWS and Kubernetes, Application security, Static and dynamic security testing, Container scanning, Vulnerability remediation pipelines, OWASP Top 10 and CWE/SANS Top 25 expertise, Exploit writing and verification
Technologies
NIST CSF, NIST AI RMF, ISO 27001, ISO 42001, AWS, Kubernetes, Java, Spring Boot
Responsibilities
Drive end-to-end risk lifecycle (identify, assess, prioritize, monitor, escalate), Maintain actionable enterprise risk registers, Establish Key Risk Indicators and management reporting, Define control objectives and effectiveness criteria, Partner with Control Assurance for automated control validation, Lead and mentor a high-performing Security GRC team, Influence cross-functional stakeholders to embed risk accountability
Seniority
Manager, strategic leadership & team scaling
