Cybersecurity Governance Director

Job Summary

Leading the charge in cybersecurity governance, the full-time remote Cybersecurity Governance Director will shape and execute strategies for governance, vendor risk management, and security awareness while collaborating across business units to enhance compliance and risk posture.

Key Responsibilities

• Champion and build the Cyber GRC function, including policy creation, compliance monitoring, and audit readiness tailored for regulatory standards
• Lead the third-party vendor risk management program, conducting security assessments and ensuring integration of cybersecurity into vendor lifecycle processes
• Design and execute a high-impact security awareness program to reduce human-factor risk through engaging training initiatives

Required Qualifications

• 10-12 years of progressive experience in cybersecurity and risk management, with a focus on GRC and compliance
• Financial services background preferred, with expertise in regulatory environments such as SEC, FINRA, and NYDFS
• Hands-on experience in transforming technology risk and compliance programs to align with business operations
• Data-driven approach to cybersecurity metrics and executive-level reporting
• Preferred certifications include CISM, CRISC, CISA, CGEIT, or CISSP