Senior Cybersecurity Governance, Risk and Compliance Manager

What you'll do

• Develop and improve cybersecurity governance programs, processes, standards, and guidelines.
• Establish second-line oversight of the cybersecurity control framework to identify and remediate gaps.
• Support regulatory examinations by coordinating evidence and responses for agencies like the NCUA.
• Translate complex cybersecurity frameworks into practical operating practices for organizational stakeholders.
• Advance Continuous Control Monitoring by connecting requirements with automated monitoring and reporting.
• Modernize GRC processes using AI, workflow automation, and the Microsoft Power Platform.
• Create and maintain cybersecurity performance metrics and dashboards for leadership visibility.
• Represent cybersecurity perspectives in AI governance efforts to ensure responsible technology adoption.

What we're looking for

• Must be a resident of WA, OR, ID, AZ, TX, GA, SC, NC, CA, or VA.
• Typically requires a Bachelor’s degree in Information Security, Computer Science, or a related field.
• An advanced degree is preferred.
• Typically requires 7 years of cybersecurity experience or related experience in IT, Compliance, or Audit.
• Must have expertise leveraging GRC frameworks including FFIEC, GLBA, PCI/DSS, SOX, and NIST CSF.
• One or more certifications such as CISSP, CCSP, CISM, GIAC, CISA, CRISC, or PCI-related certifications are preferred.
• Must have a demonstrated ability to collaborate and influence stakeholder and partner organizational leadership and management.
• Must have working knowledge of GRC tools, automation of risk evaluation, and information security systems to identify risk exposure.