Position Details

Salary $150K – $200K USD / year

Type Full-Time

Experience mid

Exp. Years 7+ years

Education Not specified

Category Cybersecurity

About this role

This role provides leadership and operational oversight for the company's enterprise GRC program, focusing on compliance, risk management, and security controls. The manager will lead a team of analysts and coordinate audit and security initiatives.

Key Responsibilities

Manage GRC team
Oversee risk assessments
Lead security policy enforcement
Coordinate audits
Manage vendor risk

Technical Overview

Environment includes enterprise security policies, risk assessment frameworks (ISO, NIST), audit management, and vendor risk management processes.

Ideal Candidate

The ideal candidate is a mid-level cybersecurity professional with over 7 years of experience in governance, risk management, and compliance. They should have proven leadership skills, extensive knowledge of security standards like ISO and NIST, and experience managing GRC teams and audit processes.

Must-Have Skills

7+ years cybersecurity experienceExperience managing GRC teamsKnowledge of security policies and standardsExperience with risk assessments and audits

Nice-to-Have Skills

AI security policiesSecurity controls implementationThird-party risk managementData classificationData Loss Prevention

Tools & Platforms

NISTISOGDPRGLBASecurity PoliciesAudit Tools

Required Skills

GRCGovernanceRiskand ComplianceSecurity PoliciesRisk AssessmentISONISTGDPRGLBASecurity ControlsAuditVendor Risk ManagementData ClassificationData Loss PreventionIncident ResponseDisaster Recovery

Hard Skills

GovernanceRiskand ComplianceGRCSecurity PoliciesRisk AssessmentISONISTGDPRGLBASecurity ControlsAudit ManagementVendor Risk ManagementData ClassificationData Loss PreventionIncident ResponseDisaster Recovery

Soft Skills

LeadershipCommunicationTeam ManagementStrategic ThinkingProblem SolvingCollaboration

Industry & Role

Industry Financial Services / Banking

Job Function Lead enterprise GRC initiatives to ensure compliance and security

Keywords for Your Resume

GRCGovernanceRiskand ComplianceSecurity PoliciesRisk AssessmentISONISTGDPRGLBASecurity ControlsAuditVendor Risk ManagementData ClassificationData Loss PreventionIncident ResponseDisaster RecoveryCybersecuritySecurity ManagementTeam Leadership

Deal Breakers

Less than 7 years cybersecurity experience, Lack of leadership or team management experience, No knowledge of security standards or policies

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile

Information Security GRC Manager

Get matched to jobs like this