Cybersecurity GRC Manager

What you'll do

• Lead the organization's GRC program to ensure compliance with NIST CSF, PCI DSS, HIPAA, and HITECH.
• Manage GRC staff including hiring, training, performance evaluations, and career development.
• Oversee the creation of security policies and standards aligned with regulatory requirements.
• Lead risk assessment activities and track the progress of remediation efforts.
• Manage compliance audits and produce technical and executive reports for leadership.
• Conduct third-party risk assessments to ensure vendor compliance.
• Direct enterprise security awareness initiatives and data protection programs.
• Oversee vulnerability management and email security programs to enforce necessary controls.

What we're looking for

• Bachelor's degree required.
• Master's degree in Information Security, Computer Science, or related field (preferred).
• 5–7 years of experience in cybersecurity GRC.
• At least 2 years of management experience.
• Expert knowledge of NIST CSF, PCI DSS, HIPAA, and HITECH.
• Relevant certifications such as CISM, CISSP, or CISA required.
• Proven leadership and project management skills.
• Proficiency in compliance, audit, and monitoring tools.