Director of Cybersecurity GRC & Risk Management

Kforce Inc; West Valley City (UT); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical/Dental/Vision insurance

HSAs and FSAs

401(k) retirement plan

Paid time off

Job summary

Kforce is seeking a Director of Cybersecurity GRC in Salt Lake City, UT to lead enterprise risk management, governance, and regulatory compliance. You will oversee risk assessments, policy development, and vendor security reviews while collaborating with technology, legal, privacy, audit, and executive teams.

The role requires deep knowledge of NIST, ISO 27001, PCI-DSS, and related standards, plus experience driving policy adoption, awareness programs, and security training across the

Qualifications

• 5+ years of experience in cybersecurity governance, risk management, compliance, or information security leadership.
• Experience conducting enterprise risk assessments and developing risk mitigation strategies.
• Experience managing security awareness and training programs.
• Experience supporting compliance efforts related to PCI-DSS, GDPR, CCPA, SOX, or similar frameworks.
• Proven success in creating and maintaining cybersecurity policies, standards, and governance frameworks.
• Strong understanding of audit processes and regulatory compliance requirements.

Responsibilities

• Lead enterprise cybersecurity governance and risk management initiatives.
• Conduct ongoing risk assessments to identify threats, vulnerabilities, and emerging cybersecurity concerns.
• Develop, maintain, and execute risk treatment and mitigation plans aligned with business objectives.
• Monitor organizational risk exposure and communicate risk findings to leadership and stakeholders.
• Ensure alignment with industry standards, regulatory requirements, and internal controls.
• Develop and maintain cybersecurity policies, standards, procedures, and governance frameworks.
• Evaluate and update security documentation to align with evolving threats, business needs, and regulatory expectations.
• Partner with business units to drive policy adoption, awareness, and compliance throughout the organization.
• Design and manage enterprise-wide cybersecurity awareness programs.

Skills

Vendor risk programs

Cybersecurity frameworks

Privacy regulations

Risk identification

AI governance

Analytical skills

Communication skills

Stakeholder management

Job description

Kforce is seeking a Director of Cybersecurity GRC in Salt Lake City, UT to lead enterprise risk management, governance, and regulatory compliance. You will oversee risk assessments, policy development, and vendor security reviews while collaborating with technology, legal, privacy, audit, and executive teams.

The role requires deep knowledge of NIST, ISO 27001, PCI-DSS, and related standards, plus experience driving policy adoption, awareness programs, and security training across the