Manager, IT Cybersecurity Governance, Risk & Compliance
Core
Lead governance, risk, and compliance (GRC) activities to manage cyber risk, ensure regulatory alignment, and drive program maturity across technology, applications, and third parties.
Role type
Manager, IT Cybersecurity Governance, Risk & Compliance
Builds
Enterprise GRC programs, risk methodologies, control libraries, and executive reporting on cyber risk and compliance.
Domain
Cybersecurity, Risk Management, Compliance, Audit
Required skills
Cybersecurity risk management, GRC frameworks (NIST, ISO 27001, PCI DSS, SOX, SOC 2, CMMC, GDPR), third-party risk management, risk analytics, GRC platform engineering, policy management, audit oversight, stakeholder influence, team leadership.
Preferred skills
Advanced degree in information security or related field, 6+ years relevant experience, 3+ years leadership experience, CISSP/CRISC/CISM certification, experience with Archer, ServiceNow GRC/IRM, OneTrust.
Technologies
ServiceNow, Office 365, GRC platforms (Archer, OneTrust)
Responsibilities
Lead GRC and control activities aligned with enterprise risk and regulatory requirements; coach and develop team members; oversee GRC tools, processes, and reporting; support development and adoption of cybersecurity policies and standards; lead risk and control work including gap identification and remediation tracking; manage cybersecurity compliance activities and audits; partner with cross-functional teams to align expectations and drive accountability; prepare executive reporting on risk and compliance performance.
Seniority
Manager, hands-on leadership