Information Security GRC Program Senior Manager

The Information Security GRC Program Senior Manager leads the enterprise governance, risk, and compliance (GRC) function within the Information Security Program and manages a team responsible for control governance, audit/exam readiness, risk assessments, and remediation execution tracking.

Requirements

• Bachelor’s degree in Information Security, Risk Management, Business, IT, or a related field (or equivalent experience).
• 8+ years of progressive experience in information security governance, risk, compliance, audit, or related disciplines.
• 3+ years of people management experience (direct reports) with demonstrated ability to build, coach, and scale a high-performing team.
• Demonstrated success leading cross-functional programs and driving accountability without direct authority.
• Strong understanding of security governance and control frameworks (e.g., NIST CSF, ISO 27001, CIS Controls) and experience mapping controls to regulatory obligations.
• Proven experience managing audits/regulatory exams, evidence, control testing/validation, and issue remediation governance.
• Excellent written and verbal communication skills; ability to translate control and compliance topics into business risk and outcomes.

Benefits

• PTO
• 401k
• Medical
• Dental
• Vision