Lead Security Engineer - GRC
Core
Senior technical and risk reference leading Third-Party Risk Management (TPRM), Security Awareness, and Cyber Risk across diverse technologies and business contexts.
Role type
Lead Security Engineer (GRC)
Builds
Policies, methodologies, platforms, and automation for security programs and risk treatment plans.
Domain
Financial Services / Cybersecurity / Risk Management
Required skills
Risk analysis (identification, assessment, prioritization), TPRM lifecycle management, Security awareness program design, Cloud environment experience (AWS, GCP, Azure), Framework knowledge (NIST CSF, ISO 27001, PCI-DSS, COBIT), Automation and scripting, Executive communication, Mentoring
Preferred skills
AI/LLM risk assessment, Generative AI security, Spanish language proficiency
Technologies
AWS, GCP, Azure, NIST CSF, ISO 27001, PCI-DSS, COBIT, ITIL
Responsibilities
Assess security gaps and define remediation plans; Lead TPRM program evolution; Define security requirements for third parties; Build automation and AI-assisted assessment capabilities; Report risk posture to leadership; Drive human risk programs (phishing, training); Track behavior-change metrics.
Seniority
Senior, hands-on IC with leadership responsibilities
