Cybersecurity GRC Manager (Hybrid)

Koch Engineered Solutions; Wichita (KS); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Retirement plan

Paid time off

Educational assistance

Infertility assistance

Parental leave

Job summary

Koch Engineered Solutions is seeking a Cybersecurity GRC Manager to build and scale a global program in a complex industrial environment, reporting to the CISO. You will strengthen governance, risk and compliance practices to support resilience, customer trust, and informed business decisions.

Location options include Wichita, KS; Tulsa, OK; Houston, TX; and Scottsdale, AZ with travel; visa sponsorship not available.

Qualifications

• Experience in cybersecurity governance, risk, and compliance program management.
• Experience interpreting regulatory, contractual, and customer cybersecurity requirements and translating them into practical actions.
• Experience partnering with cross-functional stakeholders and leaders.
• Demonstrated ability to influence in a matrixed environment.

Responsibilities

• Own and mature the cybersecurity GRC program by establishing governance structure, policies, standards, expectations, and accountability.
• Represent cybersecurity in internal meetings, review boards, and cross-functional forums.
• Build and manage cybersecurity risk processes, including risk registers, findings, remediation plans, and ownership.
• Manage cybersecurity compliance obligations across regulatory, contractual, and customer requirements (NIS2, NERC CIP, ISO 27001, NIST CSF, etc.).
• Coordinate audits, assessments, and remediation tracking with Legal, Compliance, IT and business leaders.
• Support customer, vendor, supplier, and subcontractor cybersecurity risk management, including questionnaires and contract reviews.
• Coordinate the cybersecurity awareness program with the Koch cybersecurity organization.
• Monitor emerging cybersecurity risks, regulatory changes, and program metrics to improve visibility and executive reporting.

Skills

Governance

Risk management

Regulatory compliance

Cross-functional leadership

Influencing ability

Tools

ZenGRC

ServiceNow GRC

GRC tools

Job description

Cybersecurity GRC Manager

Koch Engineered Solutions (KES) is looking for a Cybersecurity GRC Manager to build and scale a global cybersecurity GRC program in a complex industrial environment. This role reports to the KES CISO and will strengthen how KES manages cybersecurity risk, compliance obligations, and governance practices to support operational resilience, customer trust, and business decision-making.

Positions are located in Wichita, KS; Tulsa, OK; Houston, TX; or Scottsdale, AZ, with up to 10% domestic or international travel. The position is not eligible for visa sponsorship.

Key Responsibilities

• Own and mature the KES cybersecurity GRC program by establishing governance structure, policies, standards, expectations, and accountability across KES businesses.
• Represent KES cybersecurity in internal meetings, review boards, and cross‑functional forums, including coordination with the Koch cybersecurity organization.
• Build and manage cybersecurity risk processes, including risk registers, findings, vulnerabilities, remediation plans, ownership, escalation, and business acceptance.
• Manage cybersecurity compliance obligations across regulatory, contractual, and customer requirements, including NIS2, China MLPS, NERC CIP, and other applicable cybersecurity standards and frameworks.
• Coordinate cybersecurity audits, assessments, evidence requests, customer reviews, and remediation tracking in partnership with Legal, Compliance, commercial teams, IT, and business leaders.
• Support customer, vendor, supplier, and subcontractor cybersecurity risk management, including questionnaires, contract reviews, security expectations, and customer‑facing services.
• Coordinate the KES cybersecurity awareness program in partnership with the Koch cybersecurity organization, tailoring content, driving participation, and tracking effectiveness.
• Monitor emerging cybersecurity risks, regulatory changes, technology trends, and program metrics to improve visibility, inform risk decisions, support executive reporting, and strengthen program effectiveness.

Basic Qualifications

• Experience in cybersecurity governance, risk, and compliance program management, including risk registers, remediation tracking, and compliance obligations.
• Experience interpreting regulatory, contractual, and customer cybersecurity requirements and translating them into practical business actions.
• Experience partnering with cross‑functional stakeholders and leaders.
• Demonstrated ability to influence in a matrixed environment.

Preferred Experience

• Experience with GRC platforms such as ZenGRC, ServiceNow GRC, or similar tools.
• Experience with cybersecurity requirements or frameworks such as NIS2, China MLPS, NERC CIP, ISO 27001, NIST CSF, CIS Controls, or other commonly used cybersecurity maturity frameworks.
• Experience supporting customer cybersecurity questionnaires, contract security reviews, evidence requests, or external security assessments.
• Experience applying cybersecurity governance and compliance practices in a practical, risk‑based manner that supports business objectives and enables informed decision‑making.
• Experience supporting cybersecurity governance in industrial, engineering, energy, manufacturing, or operational technology environments.
• Experience supporting cybersecurity governance for emerging technologies, including AI‑enabled tools or platforms.
• Experience using AI tools to create efficiencies in business processes and role responsibilities.

Our Benefits

We provide medical, dental, vision, flexible spending and health savings accounts, life insurance, short‑ and long‑term disability, retirement, paid vacation/time off, educational assistance, infertility assistance, paid parental leave, and adoption assistance. Specific eligibility criteria are set by applicable policy and may vary by geographic region.

If you have questions on what benefits apply to you, please speak with your recruiter.

Equal Opportunity Employer

Equal Opportunity Employer, including disability and protected veteran status. Except where prohibited by state law, some offers of employment are conditioned upon successfully passing a drug test. This employer uses E‑Verify.