GRC Security Manager

Responsibilities: Lead enterprise-wide cybersecurity risk reviews to uncover control gaps, assess potential impact, and prioritize remediation plans. Create and maintain security policies, standards, and operating procedures that support regulatory expectations and business objectives. Partner with departmental leaders to ensure security requirements are clearly communicated, adopted effectively, and consistently followed. Build and manage employee security awareness initiatives, updating training content to address evolving threats and measuring program effectiveness. Serve as the main point of contact for internal audit activities related to cybersecurity controls, evidence gathering, and issue follow-up. Direct compliance efforts tied to applicable security and privacy frameworks, coordinating cross-functional teams to maintain readiness and adherence. Develop reporting dashboards and performance indicators that provide leadership with visibility into cyber risk trends and program maturity. Oversee third-party security evaluations, including due diligence reviews, risk assessments, and collaboration on contract-related security requirements. Identify cybersecurity concerns associated with AI usage and work with technical stakeholders to integrate those risks into the broader control framework. Collaborate with privacy and legal partners to align cybersecurity practices with data protection obligations and regulatory requirements.