Mgr-Security Gov & Compliance

POSITION OVERVIEW:

Leads governance risk and compliance (GRC) activities to ensure the organization meets regulatory audit and internal security requirements. Manages a team of analysts and advisors oversees compliance assessments and partners with business and technical stakeholders to strengthen the enterprise control environment

ESSENTIAL FUNCTIONS:

• Lead and manage the GRC team including hiring mentoring and performance development
• Oversee enterprise compliance and risk management programs ensuring alignment with regulatory and internal standards
• Direct audit and certification processes providing evidence addressing findings and managing remediation
• Develop and maintain information security policies standards and governance frameworks
• Partner with executives business leaders and technical teams to advise on compliance requirements and risks
• Promote awareness and adoption of governance and compliance practices across the enterprise
• Leadership and team development skills to manage and grow a high-performing GRC function
• Strategic thinking to align compliance and risk management with business priorities
• Comply with all applicable laws/regulations as well as company policies/procedures.
• Perform other duties as assigned.

QUALIFICATIONS:

• Bachelors degree in information security information systems business administration and / or related field or equivalent formal training
• Five (5) years of experience in governance risk compliance or related information security functions with at least 2 years in a leadership role
• Strong knowledge of regulatory and industry frameworks including SOX NIST ISO 27001 and COBIT
• Proven experience managing audits enterprise risk assessments and remediation programs
• Ability to develop policies standards and control frameworks to support compliance objectives
• Certifications such as CISA CRISC CISM or ISO 27001 lead implementer/auditor preferred
• Influencing and communication skills to engage executives and diverse stakeholders
• Analytical and organizational skills to oversee audits risk assessments and compliance programs

JOB CONDITIONS:

• Some travel required

Preferred Skills/ Knowledge

-Oversee enterprise vulnerability management activities including risk identification and remediation oversight -Govern patch management processes to reduce security risk and improve compliance -Lead AI cybersecurity governance ensuring secure compliant and responsible AI adoption.