Cyber GRC Leader: Strategy, Risk & Compliance

VSE Aviation, Inc.; Bloomfield, Miami, Bedford, Londonderry (CT, FL, NH, NH); Híbrido; USD 130.000 - 187.000; Jornada completa

Descripción de la vacante

VSE Aviation, Inc. in Bloomfield, CT is seeking a GRC Leader to drive cybersecurity governance, risk and compliance program.

You will report to the CISO and build a CSF 2.0 aligned program, defining current and target profiles and delivering a prioritized roadmap to close gaps. You will maintain policy libraries, risk registers, and lead audits, with responsibilities across third‑party risk, contracts, and customer security questionnaires.

Formación

• Bachelor’s degree in information security, IT, CS, or related field.
• 7 years of experience in information security, IT risk, or IT audit.
• Experience building/leading a GRC program.
• Experience mapping controls to NIST CSF, ISO/IEC 27001, and NIST SP 800-171.

Responsabilidades

• Run the cybersecurity GRC program end to end.
• Build and maintain VSE's NIST CSF 2.0 current profile by interviewing control owners across IT, Security, Legal, HR, Finance, Operations and the business units.
• Develop the target profile for CISO approval, aligned to business risk and regulatory requirements.
• Maintain a unified control framework mapped across CSF 2.0, ISO/IEC 27001, and NIST SP 800-171.
• Lead responses to inbound security questionnaires and due diligence requests from customers, partners, and prospects.
• Own the security AnswerBank and Trust Center content.
• Maintain the enterprise cybersecurity risk register with risk scoring and owners.
• Maintain the information security policy and standards library; coordinate annual review.
• Run the policy exception process and coordinate with Legal and CISO for approvals.
• Support AI governance and risk management alignment with emerging frameworks.
• Mentor control owners and lay groundwork to build a GRC team.

Conocimientos

GRC program lead

NIST CSF 2.0

Cross-functional leadership

Security questionnaires

Risk management

Educación

Bachelor’s degree or equivalent

Experience in lieu of degree

Herramientas

ServiceNow IRM

Archer

LogicGate

OneTrust

Descripción del empleo

VSE Aviation, Inc. in Bloomfield, CT is seeking a GRC Leader to drive cybersecurity governance, risk and compliance program.

You will report to the CISO and build a CSF 2.0 aligned program, defining current and target profiles and delivering a prioritized roadmap to close gaps. You will maintain policy libraries, risk registers, and lead audits, with responsibilities across third‑party risk, contracts, and customer security questionnaires.