Manager, Security GRC

Manager, Security GRC

Salary: Starting at $230k + bonus

Location: Remote

*We are unable to provide sponsorship for this role*

Qualifications

• 8+ years of professional experience in cybersecurity with at least 1 year in a leadership role
• Heavy experience in GRC, Assurance, Audit, Governance, Controls, Assessments, TPRM
• Cyber engineering and security operations, including detection engineering, platform engineering and operations, and Security Automation, Orchestration, and Response (SOAR).
• Proven experience leading transformation initiatives involving people, processes, and technology.
• Deep understanding of enterprise security platforms such as SIEM, EDR, NDR, SOAR, and cloud security tools.
• Experience applying automation, orchestration, and AI/ML to cybersecurity operations.
• Demonstrated ability to:
• Lead large-scale engineering and operational capabilities.
• Build and manage high-performing technical teams.
• Align technical capabilities with business risk and outcomes.
• Drive continuous improvement using metrics and performance insights.
• Strong communication and stakeholder management skills across all levels of the organization.

Responsibilities

• Own and execute the cyber threat management engineering strategy, driving transformation toward highly automated, AI-augmented cyber operations.
• Translate strategic objectives into actionable roadmaps, aligning team priorities with enterprise cyber risk management goals.
• Drive measurable improvements in operational effectiveness and reduction of risk impact.
• Ensure platform resilience, scalability, and alignment with evolving attack surfaces (cloud, SaaS, AI-driven environments).
• Champion the continued adoption of AI, machine learning, and automation to enable autonomous investigation and response capabilities.
• Foster a culture of innovation and experimentation to improve cyber defense capabilities.
• Mentor team members to develop expertise in emerging threats, AI-enabled security, and modern cyber defense techniques.
• Partner with Incident Response, Enterprise Architecture, and other stakeholders to design and execute effective security measures.
• Define and track key performance metrics to measure the effectiveness of risk event management services.