Mgr-Security Gov & Compliance

POSITION OVERVIEW:

Leads governance, risk, and compliance (GRC) activities to ensure the organization meets regulatory, audit, and internal security requirements. Manages a team of analysts and advisors, oversees compliance assessments, and partners with business and technical stakeholders to strengthen the enterprise control environment

ESSENTIAL FUNCTIONS:

• Lead and manage the GRC team, including hiring, mentoring, and performance development
• Oversee enterprise compliance and risk management programs, ensuring alignment with regulatory and internal standards
• Direct audit and certification processes, providing evidence, addressing findings, and managing remediation
• Develop and maintain information security policies, standards, and governance frameworks
• Partner with executives, business leaders, and technical teams to advise on compliance requirements and risks
• Promote awareness and adoption of governance and compliance practices across the enterprise
• Leadership and team development skills to manage and grow a high-performing GRC function
• Strategic thinking to align compliance and risk management with business priorities
• Comply with all applicable laws/regulations, as well as company policies/procedures.
• Perform other duties as assigned.

QUALIFICATIONS:

• Bachelor's degree in information security, information systems, business administration, and / or related field or equivalent formal training
• Five (5) years of experience in governance, risk, compliance, or related information security functions, with at least 2 years in a leadership role
• Strong knowledge of regulatory and industry frameworks including SOX, NIST, ISO 27001, and COBIT
• Proven experience managing audits, enterprise risk assessments, and remediation programs
• Ability to develop policies, standards, and control frameworks to support compliance objectives
• Certifications such as CISA, CRISC, CISM, or ISO 27001 lead implementer/auditor preferred
• Influencing and communication skills to engage executives and diverse stakeholders
• Analytical and organizational skills to oversee audits, risk assessments, and compliance programs

JOB CONDITIONS:

• Some travel required

Preferred Skills/ Knowledge

-Oversee enterprise vulnerability management activities, including risk identification and remediation oversight -Govern patch management processes to reduce security risk and improve compliance -Lead AI cybersecurity governance, ensuring secure, compliant, and responsible AI adoption.