Cybersecurity Director - Strategic GRC Leader (Remote)

Remote Genie; San Francisco, Northern (CA, KY); Hybrid; USD 230,000 - 245,000; Full time

Benefits offered by this job

Remote work possible

Health benefits

Fitness stipend

Tuition reimbursement

401(k) with company match

Paid time off

Job summary

Business Wire in San Francisco seeks a United States Director Cybersecurity to lead the cybersecurity and GRC strategy, overseeing security architecture, risk decisions, and a comprehensive governance program. You will collaborate across the organization to ensure robust security for existing and new solutions, including cloud and data protection initiatives.

The role drives privacy, compliance with PCI DSS, SOC 2, ISO 27001, and maintains a security-first culture while guiding external partners

Qualifications

• 10+ years in Information Security with managerial leadership experience.
• Experience building and leading GRC programs and risk management processes.
• Familiarity with PCI DSS, SOC 2, ISO 27001; CISSP is a plus.

Responsibilities

• Develop and maintain cybersecurity and GRC strategy and long-term roadmap.
• Oversee security architecture, cloud security, identity/access strategies, and Zero Trust.
• Lead risk assessments, penetration testing, and vulnerability management.
• Manage external cyber defense partners and incident response at executive level.
• Drive security governance, policy development, and security awareness initiatives.

Skills

Strategic leadership

Governance & risk

Cloud security

Executive communication

Cross-functional collaboration

Education

Bachelor’s or Master’s in CS/Info Security

Tools

AWS/Azure

Job description

Business Wire in San Francisco seeks a United States Director Cybersecurity to lead the cybersecurity and GRC strategy, overseeing security architecture, risk decisions, and a comprehensive governance program. You will collaborate across the organization to ensure robust security for existing and new solutions, including cloud and data protection initiatives.

The role drives privacy, compliance with PCI DSS, SOC 2, ISO 27001, and maintains a security-first culture while guiding external partners