The Senior Cybersecurity Specialist – Governance, Risk & Compliance (GRC) provides senior-level leadership and subject matter expertise in the development, governance, and oversight of the organization’s security risk and compliance program.
Requirements
- Bachelor’s degree in information systems, cybersecurity, business, or related field, or equivalent experience.
- Minimum 8–10 years of experience in information security, governance, risk management, compliance, or related discipline.
- Demonstrated experience leading policy development, risk assessments, and audit coordination activities.
- Experience working within matrixed organizations.
- Strong written and verbal communication skills
- Ability to influence without direct authority
- Strong analytical and critical thinking skills
- Ability to translate technical risk into business impact
- High attention to detail and documentation discipline
- Experience developing and governing policy frameworks
- Experience coordinating audits and regulatory assessments
- Ability to manage multiple initiatives simultaneously
- Proven ability to lead through influence in matrixed environments
- Familiarity with enterprise security frameworks (e.g., NIST)
- Understanding of regulatory and compliance obligations
- Knowledge of risk assessment methodologies
- Understanding of third-party risk management practices
- Working knowledge of application, infrastructure, and cloud security principles sufficient to assess control adequacy
- CISSP
- CISM
- CISA
- CRISC
Benefits
- 401K
- Generous Paid Time Off