Position Details
About this role
Lead the firm's cybersecurity GRC (Governance, Risk Management & Compliance) program, owning the multi-year GRC strategy, budget, and Board liaison to mature policy, standards, and regulatory compliance across the organization.
Key Responsibilities
- Policy governance and standards; Strategic planning and budgeting; Compliance & data privacy; Risk management & reporting; Third-party & vendor risk management
Technical Overview
Oversees policy governance, risk management, and compliance programs aligned to ISO 27001 and NIST CSF; manages regulatory requirements (GDPR, CMMC/DFARS, CCPA/CPRA, SOX) and third-party risk; leads adversarial readiness and data privacy initiatives.
Ideal Candidate
The ideal candidate is a mid-to-senior level GRC leader with 10+ years in cybersecurity and governance, risk, and compliance programs, capable of aligning security investments to business objectives and reporting to the Board.
Must-Have Skills
Nice-to-Have Skills
Required Skills
Hard Skills
Soft Skills
Certifications
Required
Preferred
Industry & Role
Keywords for Your Resume
Deal Breakers
Less than 10 years in cybersecurity, No leadership experience in GRC, No experience with GDPR/CCPA/DFARS/CMMC
Get matched to jobs like this
Luna finds roles that fit your skills and career goals — no endless scrolling required.
Create a Free Profile