Security Governance Lead: Policy & Controls Architect

Cohesity; Dublin; Hybrid; EUR 110,000 - 150,000; Full time

Job summary

Cohesity is seeking a Security Governance Lead to own policy and the proof for Cohesity's security controls and Common Controls Framework. You will work with Security and Engineering leadership to codify live security challenges into policy, using tooling and AI to derive meaningful, measurable control metrics.

Ideal candidates bring deep governance, risk, and compliance experience, familiarity with cloud-native security, and hands-on experience implementing GRC platforms such as ServiceNow GRC,

Qualifications

• 8+ years of experience in cybersecurity, IT governance, GRC, or related roles.
• Foundational knowledge of security frameworks (e.g., NIST CSF, ISO 27001, CIS Controls).
• Comfortable with data behind technical controls and turning it into clear control metrics with tooling (AI-assisted where applicable).
• Familiarity with security systems and cloud platforms (AWS/Azure/GCP), identity providers, or IT service tools like Jira/ServiceNow.
• Experience implementing and customizing GRC platforms (e.g., ServiceNow GRC, Archer, OneTrust).
• Strong written and verbal communication; ability to engage cross-functional stakeholders.
• Experience with audits and compliance (SOC 2, ISO 27001, GDPR, HIPAA).
• Background in GRC engineering or security data engineering; dashboards, posture monitoring.

Responsibilities

• Own the Cohesity Common Controls Framework end to end, including mapping to regulatory frameworks.
• Define and publish Cohesity information security policies and standards; lifecycle management.
• Collaborate with Security and Engineering leadership to codify emerging challenges into policy and controls.
• Turn control data into real-time or recurring metrics using tooling and AI-assisted approaches.
• Support internal and external audits with the cyber-Compliance team.
• Maintain dashboards and documentation showing control effectiveness and KPIs.
• Configure and customize GRC tooling to support evidence collection and posture reporting.
• Collaborate with Security, IT, Legal and Engineering to solve control and compliance problems.

Skills

Security governance

Risk management

Policy development

Stakeholder engagement

Communication skills

GRC analytics

Audits

Cloud platforms

Python/SQL basics

Education

Bachelor's degree in Cybersecurity

ISO 27001 Lead Implementer (certification)

Tools

ServiceNow GRC

Archer

OneTrust

GRC tooling

Cloud & IT service tools (Jira)

Job description

Cohesity is seeking a Security Governance Lead to own policy and the proof for Cohesity's security controls and Common Controls Framework. You will work with Security and Engineering leadership to codify live security challenges into policy, using tooling and AI to derive meaningful, measurable control metrics.

Ideal candidates bring deep governance, risk, and compliance experience, familiarity with cloud-native security, and hands-on experience implementing GRC platforms such as ServiceNow GRC,