Sr Cybersecurity Governance, Risk and Compliance Manager

Role overview Strengthen cybersecurity governance and control oversight at a financial institution, helping translate frameworks and regulatory expectations into standards and practices teams can apply. As a senior individual contributor, you’ll help develop second-line oversight, advance continuous control monitoring, and improve visibility into risk through automation, reporting, and connected workflows.

Responsibilities - Develop and improve cybersecurity governance programs, processes, standards, and guidelines with security leadership. - Help oversee the cybersecurity control framework, identify gaps with control owners, clarify accountability, and support remediation. - Coordinate evidence, responses, findings, and remediation for cybersecurity regulatory examinations. - Translate frameworks and changing requirements into practical control expectations and operating practices. - Advance continuous control monitoring by connecting requirements to automated monitoring, issue management, remediation workflows, and reporting. - Identify opportunities to streamline GRC work through automation and support stakeholder education on governance expectations.

Requirements - Bachelor’s degree in information security, computer science, or a related field, or equivalent education or experience; an advanced degree is preferred. - Typically seven years of cybersecurity or related IT, compliance, or audit experience. - Expertise applying enterprise GRC frameworks and requirements, including NIST CSF, FFIEC guidance, GLBA, PCI DSS, or SOX. - Ability to influence and collaborate with leaders, internal partners, vendors, and third parties. - Working knowledge of GRC tools, risk automation, enterprise risk integration, reporting, and third-party cyber risk. - Knowledge of security controls and technologies such as firewalls, vulnerability management, penetration testing, system configuration, and encryption.

Nice to have - Certifications such as CISSP, CCSP, CISM, GIAC, CISA, CRISC, or PCI-related credentials. - Experience with AI governance, workflow automation, Power Platform, or governance-as-code approaches. - Ability to develop and deliver training for technical and business audiences.

Benefits and work setup - Remote work is available to residents of Washington, Oregon, Idaho, Arizona, Texas, Georgia, South Carolina, North Carolina, California, or Virginia. Washington residents within reasonable driving distance of the headquarters are asked to attend in person Tuesdays and Wednesdays. - Listed benefits include a 401(k) match and contribution, medical, dental and vision coverage, paid time off, tuition reimbursement, and volunteer time off with donation matching.