Manager, Cybersecurity & GRC

Overview Provide strategic leadership and direction for the organization's cybersecurity program, ensuring alignment with business objectives, enterprise risk, and evolving threat landscapes. Lead cybersecurity strategy, governance, risk management, and compliance (GRC), with executive oversight of security operations, incident response, cyber resilience, cloud security, third-party risk, and the secure adoption of AI and emerging technologies. Serve as a trusted cybersecurity advisor to executive leadership, translating complex technology and cyber risks into clear business priorities, investment decisions, and actionable risk mitigation strategies. Key Responsibilities Develop and execute a multi-year cybersecurity strategy, roadmap, and operating model aligned with business objectives and enterprise risk appetite. Lead the enterprise cybersecurity GRC program, including risk assessments, policies, control frameworks, remediation, compliance, and executive reporting. Establish cybersecurity governance, standards, and controls across infrastructure, cloud, applications, identity, data, and emerging technologies. Define and oversee the cybersecurity strategy for AI, Generative AI, machine learning, and emerging technology adoption. Assess and mitigate AI-related cybersecurity, privacy, data protection, model security, and third-party risks. Establish governance and security requirements for the responsible and secure use of AI and emerging technologies. Evaluate opportunities to leverage AI and automation to improve threat detection, security monitoring, vulnerability management, and incident response. Monitor evolving cyber threats, attack techniques, and vulnerabilities, translating intelligence into appropriate security controls and mitigation strategies. Advise executive leadership on cybersecurity posture, material risks, risk exposure, and strategic priorities. Provide executive-level reporting on cybersecurity performance, risk, compliance, and program maturity. Oversee cybersecurity audits, regulatory assessments, customer security reviews, and compliance initiatives. Establish and monitor cybersecurity KPIs and KRIs to measure control effectiveness, risk exposure, and program maturity. Develop cybersecurity budgets, investment plans, business cases, and resource priorities. Provide oversight of incident response, business continuity, cyber resilience, disaster recovery, and incident simulation exercises. Oversee the effectiveness of internal and external security operations capabilities, including SOC, managed security services, threat intelligence, and vulnerability management. Lead third-party and supply-chain cybersecurity risk management, including vendor assessments, security requirements, and ongoing risk oversight. Collaborate with IT, business, Legal, Privacy, Risk, Procurement, and Internal Audit to embed security into enterprise decisions and technology initiatives. Build, lead, and develop a high-performing cybersecurity team, establishing clear accountability, capability, and continuous improvement. Qualifications and Experience Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline. 12+ years of progressive experience in cybersecurity or information security, including at least 5 years in senior leadership or management roles. Demonstrated expertise in cybersecurity strategy, governance, risk management, compliance, and security assurance. Proven experience managing security operations, SOC/MSSP providers, and incident response capabilities. Strong understanding of cybersecurity risks associated with AI, cloud, automation, and emerging technologies. Experience developing and implementing enterprise security policies, standards, controls, and risk mitigation strategies. Demonstrated experience in cyber incident management, business resilience, and security program transformation. Proven ability to communicate complex cybersecurity risks and recomm…

View the full posting and apply