Cyber Risk & GRC Lead — Remote/Hybrid

Centene Corp.; Missouri; Hybrid; USD 88,000 - 158,000; Full time

Benefits offered by this job

Health insurance

401K

Stock purchase plan

Tuition reimbursement

Paid time off

Flexible work arrangements

Remote, hybrid, field or office work

Job summary

Centene is seeking an experienced cybersecurity risk professional to own the risk lifecycle across EPSRM, ensuring risks are identified, documented, governed, monitored, and communicated in alignment with ERM and Centene’s risk appetite.

You will coordinate risk intake across GRC workstreams, maintain the risk register structure and enterprise risk register, and provide dashboards and executive reports to support risk-informed decisions.

Qualifications

• 4+ years of combined auditing and IT controls design experience.
• Experience managing a formal cybersecurity or technology risk register (risk intake, documentation, reporting, lifecycle management).
• Strong knowledge of risk assessment methodologies, risk taxonomies, and core risk concepts.
• Experience supporting GRC initiatives beyond steady state operations (framework alignment, tooling, audits).

Responsibilities

• Own and manage the lifecycle and documentation of cybersecurity risks across multiple GRC workstreams.
• Design and maintain the cybersecurity risk register structure (taxonomy, scoring, lifecycle, ownership, workflows).
• Maintain the cybersecurity component of the enterprise risk register; coordinate with ERM.
• Engage with risk owners to understand risks, mitigation plans, and responsible actions.
• Provide regular risk reporting to Cybersecurity GRC leadership and EPSRM leadership.
• Develop dashboards and recurring reporting artifacts on risk posture and trends.
• Support specialty GRC projects and documentation efforts.

Skills

Risk management

Stakeholder communication

Regulatory knowledge

Cybersecurity governance

Education

Bachelor's degree or equivalent

Tools

Archer GRC

Job description

Centene is seeking an experienced cybersecurity risk professional to own the risk lifecycle across EPSRM, ensuring risks are identified, documented, governed, monitored, and communicated in alignment with ERM and Centene’s risk appetite.

You will coordinate risk intake across GRC workstreams, maintain the risk register structure and enterprise risk register, and provide dashboards and executive reports to support risk-informed decisions.