Lead, Cybersecurity GRC & Risk Management
Core
Lead risk and control assessments, remediation, and compliance for core cybersecurity domains to protect customers and meet regulatory requirements.
Role type
Senior IC Cybersecurity GRC Lead
Builds
Secure technology capabilities and compliant cyber security standards
Domain
Financial Services / Cybersecurity Governance, Risk, and Compliance
Required skills
Cybersecurity control testing, Risk assessment, Regulatory framework mapping, Issue management, Gap analysis, Cloud security governance, Vulnerability management, Incident response, Audit methodologies, Technical analysis
Preferred skills
Penetration testing, Application security, Identity and Access Management (IAM), Data protection, NIST CSF/RMF expertise, Servant leadership, Training and mentoring
Technologies
NIST CSF, NIST RMF, CRI Profile, APQC, Microsoft Office Suite
Responsibilities
Lead risk and control assessments across cybersecurity domains; Plan and oversee cybersecurity control evidence collection and gap analysis; Lead identification and closure of cybersecurity issues; Map controls to risks and regulatory requirements; Evaluate evidence for control design and operating effectiveness; Provide technical guidance to cybersecurity and business units.
Seniority
Senior, hands-on IC with leadership responsibilities
