Enterprise Cybersecurity & GRC Leader (NIST/GDPR/SOX)

Emergent Software; Hartford (CT); Presencial; USD 140.000 - 170.000; Jornada completa

Descripción de la vacante

Emergent Software in Hartford, CT is seeking a senior Cyber Security & GRC Engineer to lead an enterprise-wide security, governance, risk, and compliance program.

You will own the Vanta platform, implement NIST CSF 2.0, GDPR, and SOX ITGC controls, and report to executives and auditors. This is a hands-on leadership role requiring collaboration across multiple entities and driving continuous security improvements.

Formación

• Bachelor's degree or equivalent required.
• 7+ years in information security or risk management.
• Hands-on GRC platform experience.
• Experience with NIST CSF, GDPR, SOX ITGC.
• Certifications: CISSP, CISM, CRISC, or CISA.
• Strong written and verbal communication.

Responsabilidades

• Own and mature enterprise cybersecurity and risk program across a multi-entity organization.
• Design and maintain a harmonized control framework supporting NIST CSF 2.0, GDPR, and SOX ITGC requirements.
• Lead governance activities, including risk reviews, KPI/KRI reporting, executive reporting, and steering committee meetings.
• Serve as primary liaison for auditors, assessors, clients, and internal stakeholders regarding security and compliance matters.
• Administer and optimize Vanta as the enterprise GRC system of record.
• Configure controls, integrations, tests, evidence collection, continuous monitoring, and audit workflows within Vanta.
• Develop, maintain, and manage enterprise security policies, standards, procedures, exceptions, and policy lifecycle processes.
• Lead SOX ITGC readiness and compliance efforts.
• Operationalize GDPR requirements, including records of processing, DPIAs, data subject rights management, vendor oversight, and breach response.
• Conduct NIST CSF 2.0 assessments, maturity reviews, gap analyses, and remediation planning.
• Manage enterprise risk assessments, risk registers, third-party vendor risk programs, and remediation initiatives.
• Oversee vulnerability management, patch coordination, access reviews, and technical security controls across cloud and on-premises environments.
• Lead incident response activities, including preparation, detection, containment, recovery, and post-incident reviews.
• Provide security architecture guidance for new systems, integrations, cloud solutions, and data platforms.
• Build and manage security awareness, phishing simulation, and employee training programs.
• Partner with business and project teams to ensure security and privacy requirements are incorporated into solution design.

Conocimientos

GRC ownership

Vanta administration

NIST CSF 2.0

GDPR & SOX ITGC

Auditing & reporting

Cloud security knowledge

Executive communication

Educación

Bachelor's degree in CS / InfoSec or equivalent

Herramientas

Vanta

Descripción del empleo

Emergent Software in Hartford, CT is seeking a senior Cyber Security & GRC Engineer to lead an enterprise-wide security, governance, risk, and compliance program.

You will own the Vanta platform, implement NIST CSF 2.0, GDPR, and SOX ITGC controls, and report to executives and auditors. This is a hands-on leadership role requiring collaboration across multiple entities and driving continuous security improvements.