Cybersecurity Governance Risk and Awareness Manager

Neptune Technology Group Group Inc.; Duluth (GA); Híbrido; USD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work arrangement

Descripción de la vacante

Neptune Technology Group Inc. seeks a proactive Cybersecurity Governance, Risk and Awareness Manager to mature governance, risk, and awareness programs. Lead GRC resources, own policy development, coordinate risk tracking, and deliver engaging security training.

The ideal candidate will strengthen Neptune’s security culture, improve risk visibility, and drive compliance alignment with stakeholders across IT, product, and operations.

Formación

• 5+ years in information security, with 2+ years in GRC, risk management, or security awareness.
• Experience leading teams and managing security programs.
• Strong understanding of security frameworks (NIST, ISO, SOC 2, etc.).

Responsabilidades

• Develop, maintain, and enforce security policies, standards, and procedures.
• Coordinate enterprise risk identification, documentation, assessment, and reporting.
• Lead security awareness programs and phishing simulations.
• Report risk and training metrics to leadership and stakeholders.

Conocimientos

GRC leadership

Policy management

Security awareness

Executive reporting

Cross-functional coordination

Educación

CISSP

CISM

Herramientas

OneTrust

KnowBe4

Descripción del empleo

Cybersecurity Governance Risk and Awareness Manager

Job Category: Cybersecurity

Requisition Number: CYBER018939

• Posted : October 14, 2026
• Full-Time
• Hybrid

Locations

Showing 1 location

Description

Neptune Technology Group Inc. is a technology company serving water utilities across North America. Since 1892, we have continually focused on the evolving needs of water utilities – revenue optimization, operational efficiencies, and improved customer service. With our portfolio of smart water meters, data collection systems and software, we make data actionable for our customers – so they can remain focused on the business of water. For additional information, please visit the company website at www.neptunetg.com .

Cybersecurity Governance, Risk, and Awareness Manager

Position Summary

Neptune is seeking a proactive leader to mature our governance, risk management, and awareness programs across the organization. This role will lead GRC Analyst resources, own policy and procedure development, coordinate risk identification and tracking, support compliance alignment, and deliver engaging security training and awareness campaigns. The ideal candidate will be passionate about strengthening Neptune’s security culture, improving visibility into risk, and helping teams understand and meet security expectations.

Key Responsibilities

Governance

• Develop, maintain, and enforce security policies, standards, and procedures
• Manage and mentor GRC Analyst resources
• Coordinate with parent company to ensure governance alignment.
• Coordinate enterprise risk identification, documentation, assessment, and reporting activities
• Partner with control owners to track remediation plans, corrective actions, exceptions, and risk acceptances
• Maintain risk registers and ensure risks have clear ownership, status, due dates, and supporting evidence
• Support risk reviews with Security, Compliance, IT Operations, Product, Engineering, and business stakeholders
• Prepare leadership-ready risk summaries, trends, and updates to support decision-making
• Design and deliver engaging security awareness programs using platforms like KnowBe4
• Develop targeted training for technical and non-technical staff
• Measure and report on training effectiveness and employee engagement
• Lead and manage phishing simulation campaigns to strengthen employee awareness and response

Reporting & Metrics

• Deliver actionable metrics on policy adoption, risk posture, remediation progress, and awareness program effectiveness
• Report regularly to executive leadership and Neptune’s parent company

Relevant Platforms (experience with several is expected)

• Risk Management: g. OneTrust or similar risk register and assessment platforms
• GRC & Policy Management: g. OneTrust
• Security Awareness:e.g KnowBe4
• Other:Familiarity with compliance frameworks, risk registers, security policies, cloud environments, and enterprise security processes

Minimum Qualifications

• 5+ years in information security, including 2+ years in GRC, risk management, or security awareness roles
• Experience leading teams and managing security programs
• Strong understanding of security frameworks (NIST, ISO, SOC 2, etc.)
• Excellent communicator with experience in cross-functional coordination and executive reporting

Preferred Qualifications

• CISSP, CISM, or equivalent certification
• Experience with enterprise risk management, cybersecurity awareness programs, and security compliance activities

Travel Requirements

• Typically requires overnight travel less than 10% of the time.

Location

#HP1

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.