Cybersecurity GRC Director

Job Summary

Leading the Cybersecurity GRC group, the full-time salaried Cybersecurity GRC Director will manage governance, risk, and compliance activities, oversee client audit support, and ensure alignment with business objectives and regulatory requirements in a remote setting.

Key Responsibilities

• Maintain direct responsibility for all aspects of IS GRC, including governance, risk assessment, compliance, and audit support
• Oversee the development and continual improvement of the cybersecurity program, ensuring it meets professional, contractual, regulatory, and certification requirements
• Manage the IS GRC team and budget, providing expert guidance and support for client audits, RFP responses, and regulatory reviews

Required Qualifications

• 10-12+ years of experience in cybersecurity, with 3-5 years in a leadership or program management role
• Thorough knowledge of major cybersecurity frameworks such as NIST CSF, CIS Controls, SOC2T2, and COBIT
• Proficiency in at least one major EGRC/ITGRC platform (e.g., ServiceNow GRC, Archer, OneTrust, LogicGate)
• Comprehensive understanding of common regulatory schemes including GDPR, PCI-DSS, and HIPAA
• Advanced understanding of technical controls and their application to risk management and compliance