Cybersecurity GRC Manager (Hybrid)

Koch Business Solutions, LP; Tulsa (OK); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Flexible spending and health savings

Life insurance

ADD

Disability

Retirement

Paid vacation / time off

Educational assistance

Infertility assistance

Paid parental leave

Adoption assistance

Job summary

Koch Engineered Solutions (KES) is seeking a Cybersecurity GRC Manager to lead and scale a global cybersecurity GRC program in a complex industrial setting. You will report to the CISO and collaborate with executive leadership to strengthen risk governance and compliance across regulatory, contractual, and customer requirements.

The role offers exposure to senior leaders and cross-functional teams, with responsibilities spanning risk management, audits, and awareness programs.

Qualifications

• Experience in cybersecurity governance, risk, and compliance program management.
• Ability to interpret regulatory, contractual, and customer requirements and translate to actions.
• Experience partnering with cross-functional leaders and stakeholders.
• Proven ability to influence in a matrixed environment.

Responsibilities

• Own and mature the KES cybersecurity GRC program by establishing governance structure, policies, standards, expectations, and accountability across KES businesses.
• Represent KES cybersecurity in internal meetings and cross-functional forums, coordinating with the Koch cybersecurity organization.
• Build and manage cybersecurity risk processes, including risk registers, findings, remediation plans, and business acceptance.
• Manage cybersecurity compliance obligations across regulatory, contractual, and customer requirements (NIS2, MLPS, NERC CIP, ISO 27001, NIST CSF).
• Coordinate cybersecurity audits, evidence requests, and remediation tracking with Legal, Compliance, and business leaders.
• Support customer, vendor, supplier, and subcontractor cybersecurity risk management including questionnaires and contract reviews.
• Coordinate the KES cybersecurity awareness program with Koch cybersecurity team, driving participation.
• Monitor emerging cybersecurity risks and regulatory changes to inform risk decisions and executive reporting.

Skills

Cybersecurity governance

Risk management

Regulatory compliance

Stakeholder collaboration

GRC tooling

Matrix leadership

Tools

ZenGRC

ServiceNow GRC

Job description

Koch Engineered Solutions (KES) is looking for a Cybersecurity GRC Manager to join our global IT capability. This is a unique opportunity to build and scale a global cybersecurity GRC program in a complex industrial environment with direct exposure to executive leadership. Reporting to the KES CISO, this role will help strengthen how KES manages cybersecurity risk, compliance obligations, and governance practices to support operational resilience, customer trust, and business decision-making.

This position has flexibility to sit in Wichita, KS, Tulsa, OK, Houston, TX or Scottsdale, AZ, and may require domestic and international travel up to 10%. This position is not eligible for visa sponsorship.

Our Team

The KES IT capability partners with the KES businesses to apply technology in ways that improve performance, manage risk, and support long‑term business objectives. Within IT, the KES cybersecurity capability works in close partnership with other IT functions, the Koch cybersecurity organization, and business leaders across legal, compliance, commercial, and operations to meet customer, regulatory, and contractual security expectations while embedding security considerations into business and technology processes.

As a member of this team, you will operate in a diverse, cross‑functional environment with a high degree of autonomy, driving outcomes across organizational boundaries.

What You Will Do

• Own and mature the KES cybersecurity GRC program by establishing governance structure, policies, standards, expectations, and accountability across KES businesses.
• Represent KES cybersecurity in internal meetings, review boards, and cross‑functional forums, including coordination with the Koch cybersecurity organization.
• Build and manage cybersecurity risk processes, including risk registers, findings, vulnerabilities, remediation plans, ownership, escalation, and business acceptance.
• Manage cybersecurity compliance obligations across regulatory, contractual, and customer requirements, including NIS2, China MLPS, NERC CIP, and other applicable cybersecurity standards and frameworks.
• Coordinate cybersecurity audits, assessments, evidence requests, customer reviews, and remediation tracking in partnership with Legal, Compliance, commercial teams, IT, and business leaders.
• Support customer, vendor, supplier, and subcontractor cybersecurity risk management, including questionnaires, contract reviews, security expectations, and customer‑facing services.
• Coordinate the KES cybersecurity awareness program in partnership with the Koch cybersecurity organization, tailoring content, driving participation, and tracking effectiveness.
• Monitor emerging cybersecurity risks, regulatory changes, technology trends, and program metrics to improve visibility, inform risk decisions, support executive reporting, and strengthen program effectiveness.

Who You Are (Basic Qualifications)

• Experience in cybersecurity governance, risk, and compliance program management, including risk registers, remediation tracking, and compliance obligations.
• Experience interpreting regulatory, contractual, and customer cybersecurity requirements and translating them into practical business actions.
• Experience partnering with cross‑functional stakeholders and leaders.
• Demonstrated ability to influence in a matrixed environment.

What Will Put You Ahead

• Experience with GRC platforms such as ZenGRC, ServiceNow GRC, or similar tools to manage risk, compliance, and audit activities.
• Experience with cybersecurity requirements or frameworks such as NIS2, China MLPS, NERC CIP, ISO 27001, NIST CSF, CIS Controls, or other commonly used cybersecurity maturity frameworks.
• Experience supporting customer cybersecurity questionnaires, contract security reviews, evidence requests, or external security assessments.
• Experience applying cybersecurity governance and compliance practices, in a practical, risk‑based manner that supports business objectives and enables informed decision‑making.
• Experience supporting cybersecurity governance in industrial, engineering, energy, manufacturing, or operational technology environments.
• Experience supporting cybersecurity governance for emerging technologies, including AI‑enabled tools or platforms.
• Experience using AI tools to create efficiencies in business processes and role responsibilities.

Benefits

• Medical
• Dental
• Vision
• Flexible spending and health savings accounts
• Life insurance
• ADD
• Disability
• Retirement
• Paid vacation / time off
• Educational assistance
• Infertility assistance
• Paid parental leave
• Adoption assistance

Equal Opportunity Employer, including disability and protected veteran status. Except where prohibited by state law, some offers of employment are conditioned upon successfully passing a drug test. This employer uses E-Verify. Please click here for additional information. (For Illinois E-Verify information click here, aqui, or tu). #LI-MW1