Cybersecurity GRC Lead | Independent Risk Oversight

SF Fire Credit Union; San Francisco (CA); On-site; USD 145,000 - 217,000; Full time

Benefits offered by this job

401(k) and Employer Match

Health, Vision, Dental and Life

Annual Incentive/Bonus Program

Tuition Reimbursement

Paid Holidays + PTO

Professional development

Wellness Program

Job summary

SF Fire Credit Union is seeking a full-time Cybersecurity Governance, Risk and Compliance Manager to oversee cybersecurity risk independently of CIO/IT management. You will review practices, challenge remediation timelines, and ensure critical issues reach the right decision-makers while maintaining strong governance and compliance across IT, Legal, and business functions.

The role requires deep cybersecurity expertise, sound judgment, and the ability to communicate clearly across leadership

Qualifications

• Bachelor’s degree in Information Security, Computer Science or related field.
• 7+ years of progressive cybersecurity experience or related IT/Compliance/Audit.
• Certifications such as CISSP, CCSP, CISM, GIAC, CISA, CRISC, PCI-related.

Responsibilities

• Independently review IT cybersecurity practices, policies, configurations and control effectiveness.
• Assess IT response to vulnerabilities and threat intel with regard to risk exposure.
• Recommend improvements to IT controls, resources, and remediation plans.
• Escalate material cybersecurity risks with documented justification.

Skills

Cybersecurity strategy

Governance risk compliance

Independent assessment

Education

Bachelor’s degree in Information Security or related field

Job description

SF Fire Credit Union is seeking a full-time Cybersecurity Governance, Risk and Compliance Manager to oversee cybersecurity risk independently of CIO/IT management. You will review practices, challenge remediation timelines, and ensure critical issues reach the right decision-makers while maintaining strong governance and compliance across IT, Legal, and business functions.

The role requires deep cybersecurity expertise, sound judgment, and the ability to communicate clearly across leadership