Senior Cyber Security & GRC Lead
Core
Lead enterprise cybersecurity and risk management programs across a multi-entity organization, focusing on governance, compliance, and technical security controls.
Role type
Senior Cyber Security & GRC Lead
Builds
Unified control frameworks for NIST CSF, SOX ITGC, and GDPR; enterprise GRC system of record (Vanta); security policies and risk registers.
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Required skills
GRC platform administration, NIST CSF implementation, SOX ITGC compliance, GDPR implementation, security policy development, risk assessment, vulnerability management, incident response, cloud security, identity and access management, endpoint security, logging, security operations
Preferred skills
Publicly traded company experience, SOX Section 404 compliance, multi-organization program leadership, ISO 27001 certification, SANS/GIAC certifications, construction/engineering/energy industry experience, AI/ML governance
Technologies
Vanta, NIST CSF 2.0, SOX ITGC, GDPR, Cloud Security, AI/ML
Responsibilities
Own and develop the enterprise cybersecurity and risk management program; Design, implement, and maintain a unified control framework; Lead governance activities including risk reviews and executive updates; Act as the main point of contact for auditors; Own and optimize Vanta as the enterprise GRC system of record; Develop and manage enterprise security policies; Lead SOX ITGC readiness; Put GDPR requirements into practice; Conduct NIST CSF 2.0 assessments; Manage enterprise risk assessments and third-party vendor risk programs; Oversee vulnerability management and patch coordination; Lead incident response; Provide security architecture guidance; Build and manage security awareness and training programs; Partner with business teams to incorporate security requirements.
