Senior Manager, Security GRC

Job Summary

Driving the enterprise security governance framework, the full-time Senior Manager, Security GRC will manage compliance strategy, risk posture, and policy architecture while serving as the primary cyber risk advisor to the CISO and executive leadership in a hybrid work environment.

Key responsibilities

• Own the enterprise GRC strategy and program roadmap aligned to business objectives and risk appetite
• Govern regulatory compliance across various frameworks while managing audit relationships
• Lead Cyber-Supply Chain Risk Management and oversee Business Continuity Planning integration with cybersecurity resilience

Required qualifications

• 12+ years in cybersecurity with 5+ years leading enterprise GRC programs in complex, global organizations
• CISSP or CISM certification required; CRISC or CGEIT preferred
• Proven ability to translate complex cyber risk into board-level narratives
• Demonstrated ability to build and lead high-performing teams
• Mastery of NIST CSF, NIST RMF, ISO 27001, and ISO 31000 frameworks