Cybersecurity GRC Section Manager

About the Role

We are seeking a seasoned Cybersecurity GRC Section Manager to spearhead our Cybersecurity Governance, Risk & Compliance (GRC) function. In this pivotal leadership position, you will be instrumental in developing and executing a robust cybersecurity strategy that aligns with our organization’s business objectives, enhances risk management frameworks, and ensures adherence to both internal policies and external regulatory mandates. Your role will encompass overseeing cybersecurity initiatives, tracking performance against key performance indicators (KPIs), and leading a high-performing team of specialists dedicated to governance, risk, and compliance. This role is ideal for a strategic thinker with a proven track record in cybersecurity GRC, capable of navigating the complexities of an enterprise environment while driving measurable improvements in security posture.

Key Responsibilities

• Cybersecurity Governance, Risk & Compliance Strategy: Develop and implement a forward-thinking GRC strategy that integrates seamlessly with our enterprise objectives, ensuring a robust framework for managing cybersecurity risks and compliance obligations.
• Policy Development and Regulatory Alignment: Craft, refine, and maintain cybersecurity policies, standards, and procedures that meet both internal governance requirements and external regulatory standards, such as GDPR, NIST, ISO 27001, and industry-specific mandates.
• Enterprise Risk Management: Lead enterprise-wide risk management initiatives, identifying, assessing, and mitigating cybersecurity risks while fostering a culture of risk awareness across the organization. Oversee third-party security assessments to ensure vendors and partners adhere to our stringent security requirements.
• Performance Monitoring and Reporting: Establish and track KPIs to measure the effectiveness of our cybersecurity GRC program. Generate comprehensive reports for senior leadership and stakeholders, providing actionable insights to drive continuous improvement.
• Awareness, Training, and Continuous Improvement: Champion cybersecurity awareness campaigns and training programs to educate employees at all levels on best practices, emerging threats, and compliance obligations. Foster a proactive approach to identifying and addressing gaps in our security posture.

Ideal Candidate Profile

We are looking for a dynamic and experienced leader with a deep understanding of cybersecurity GRC principles and practices. The ideal candidate will possess a strong background in managing risk within complex, enterprise-level environments and a demonstrated ability to align security initiatives with business goals. Strong leadership skills, strategic thinking, and excellent communication abilities are essential to succeed in this role. If you are passionate about driving cybersecurity excellence and leading a team of experts in a collaborative and innovative environment, we encourage you to apply.