Cybersecurity Governance, Risk & Compliance (GRC) Scrum Master

Bayer AG; Creve Coeur (MO); Remote; USD 90,000 - 130,000; Full time

Job summary

A global company in healthcare is seeking a Cybersecurity GRC Scrum Master to support the maturation of its global cybersecurity governance, risk, and compliance (GRC) platform. This remote role requires collaboration with various stakeholders to translate GRC requirements into Agile delivery methods. Ideal candidates should have 5-10 years of experience in cybersecurity GRC, strong communication skills, and familiarity with Agile methodologies. Certifications such as CISSP, CISA, or CISM are preferred.

Qualifications

• 5-10 years of experience in cybersecurity GRC, information security risk management, or IT compliance.
• Ability to translate technical security risks into business-relevant language.
• Strong documentation, communication, and stakeholder management skills.

Responsibilities

• Lead daily stand-ups, sprint planning, retrospectives, and backlog refinement sessions.
• Collaborate with stakeholders to integrate GRC requirements into agile processes.
• Identify and resolve obstacles that hinder the team's progress.
• Provide guidance on Agile principles and practices.
• Act as a liaison between the development team and stakeholders.
• Track and analyze team performance metrics to enhance agile delivery.

Skills

Cybersecurity GRC

Agile methodologies

Information security risk management

Communication

Stakeholder management

Education

Bachelor's degree in Information Security, Computer Science, Risk Management, or a related field

Tools

CISSP

CISA

CISM

Job description

Cybersecurity Governance, Risk & Compliance (GRC) Scrum Master (Contract)

Remote

Contract (3 months 6 days)

Published 6 days ago

Agile (Scrum) methodology

Governance, Risk, Compliance (GRC)

CISM

Cybersecurity Framework

CISA

CISSP (Certified Information Systems Security Prof

Position Summary
The Cybersecurity GRC Scrum Master is responsible for supporting the maturation of the organization’s global cybersecurity governance, risk, and compliance (GRC) platform. This role partners closely with other members of the cybersecurity GRC team, cybersecurity, and IT stakeholders to translate GRC requirements into Agile software delivery methods.
The ideal candidate brings 5-10 years of total experience that includes delivering technology projects across complex regulatory landscapes and translating technical security concepts into clear, actionable guidance for diverse global stakeholders.

Key Responsibilities

• Lead daily stand‑ups, sprint planning, retrospectives, and backlog refinement sessions to ensure effective communication and collaboration among team members.
• Collaborate with stakeholders to align Scrum practices with GRC objectives, ensuring that governance, risk management, and compliance requirements are integrated into agile processes.
• Identify and resolve obstacles that hinder the team's progress, fostering an environment of continuous improvement and helping the team to achieve its sprint goals.
• Provide guidance and support to team members on Agile principles and practices, promoting a culture of self‑organization and accountability within the team.
• Act as a liaison between the development team and stakeholders, ensuring that feedback is incorporated into the product backlog and that expectations are managed effectively.
• Track and analyze team performance metrics, such as velocity and burn‑down charts, to facilitate informed decision‑making and enhance the overall effectiveness of the team’s agile delivery.

Required Experience

• 5‑10 years of experience in cybersecurity GRC, information security risk management, or IT compliance
• Ability to translate technical security risks into business‑relevant language
• Strong documentation, communication, and stakeholder management skills

Preferred Experience

• 2+ years of experience leading or working in Agile project management and delivery teams
• Experience working in IT or cyber security in the healthcare, pharmaceutical, or life science industry
• Experience with third‑party risk management and vendor security assessments
• Certification in CISSP, CISA, CISM, or comparable

Education

Bachelor’s degree in Information Security, Computer Science, Risk Management, or a related field