VP Cyber GRC & Vendor Management

Job Summary

Leading the Cyber GRC, Vendor Management, and Awareness teams, the full-time remote VP Cyber GRC & Vendor Management will manage cybersecurity policies, oversee third-party vendor risk management, and enhance security awareness programs while ensuring compliance with regulatory standards.

Key responsibilities:

• Establish and lead the Cyber GRC function, developing policies and compliance monitoring aligned with regulatory requirements
• Oversee the third-party vendor risk management program, including security assessments and ongoing vendor monitoring
• Build and enhance the enterprise security awareness and training program to reduce human-related security risks

Required qualifications:

• 15+ years of progressive cybersecurity and risk management experience in leadership roles within large enterprises, particularly in financial services
• Direct experience in financial services with a strong understanding of regulatory environments and examination processes
• Demonstrated success in building and maturing technology risk management and compliance programs at scale
• Experience in designing security metrics programs and executive-level reporting linking cybersecurity performance to business outcomes
• Relevant certifications preferred: CISSP, CISM, CRISC, CISA, CGEIT, or equivalent