Manager, Security GRC

Salary: Starting at $230k + bonus

Location: Remote*We are unable to provide sponsorship for this role*

Qualifications: 8+ years of professional experience in cybersecurity with at least 1 year in a leadership role Heavy experience in GRC, Assurance, Audit, Governance, Controls, Assessments, TPRMCyber engineering and security operations, including detection engineering, platform engineering and operations, and Security Automation, Orchestration, and Response (SOAR).Proven experience leading transformation initiatives involving people, processes, and technology. Deep understanding of enterprise security platforms such as SIEM, EDR, NDR, SOAR, and cloud security tools. Experience applying automation, orchestration, and AI/ML to cybersecurity operations. Demonstrated ability to: Lead large-scale engineering and operational capabilities. Build and manage high-performing technical teams. Align technical capabilities with business risk and outcomes. Drive continuous improvement using metrics and performance insights. Strong communication and stakeholder management skills across all levels of the organization.

Responsibilities: Own and execute the cyber threat management engineering strategy, driving transformation toward highly automated, AI-augmented cyber operations. Translate strategic objectives into actionable roadmaps, aligning team priorities with enterprise cyber risk management goals. Drive measurable improvements in operational effectiveness and reduction of risk impact. Ensure platform resilience, scalability, and alignment with evolving attack surfaces (cloud, SaaS, AI-driven environments).Champion the continued adoption of AI, machine learning, and automation to enable autonomous investigation and response capabilities. Foster a culture of innovation and experimentation to improve cyber defense capabilities. Mentor team members to develop expertise in emerging threats, AI-enabled security, and modern cyber defense techniques. Partner with Incident Response, Enterprise Architecture, and other stakeholders to design and execute effective security measures. Define and track key performance metrics to measure the effectiveness of risk event management services.