Global Cyber GRC Manager: Build & Scale Risk & Compliance

Koch Business Solutions, LP; Scottsdale (AZ); On-site; USD 140,000 - 190,000; Full time

Job summary

Koch Engineered Solutions (KES) is seeking a Cybersecurity GRC Manager to lead and scale our global cybersecurity risk, governance, and compliance program. You will report to the CISO and partner with Legal, Compliance, IT, and business leaders to strengthen operational resilience, customer trust, and informed decision-making.

The role covers building risk processes, governing regulatory obligations such as NIS2, NERC CIP, ISO 27001, and coordinating audits, evidence requests, and vendor risk.

Qualifications

• Experience in cybersecurity governance, risk, and compliance program management.
• Ability to translate regulatory and customer requirements into practical actions.
• Proven cross-functional collaboration and leadership in a matrixed organization.

Responsibilities

• Establish and mature the global cybersecurity GRC program with governance and accountability.
• Coordinate with Koch cybersecurity organization and cross-functional forums.
• Build and manage risk processes, registers, findings, remediation plans, and ownership.
• Oversee regulatory, contractual, and customer compliance obligations (NIS2, NERC CIP, ISO 27001, NIST CSF).
• Coordinate audits, evidence requests, and remediation tracking with Legal and IT.
• Support supplier and subcontractor cybersecurity risk management.
• Lead cybersecurity awareness initiatives and measure effectiveness.
• Monitor emerging risks and report to executives.

Skills

Cybersecurity governance

Risk management

Regulatory compliance

Stakeholder collaboration

Matrixed environment influence

Tools

ZenGRC

ServiceNow GRC

Job description

Koch Engineered Solutions (KES) is seeking a Cybersecurity GRC Manager to lead and scale our global cybersecurity risk, governance, and compliance program. You will report to the CISO and partner with Legal, Compliance, IT, and business leaders to strengthen operational resilience, customer trust, and informed decision-making.

The role covers building risk processes, governing regulatory obligations such as NIS2, NERC CIP, ISO 27001, and coordinating audits, evidence requests, and vendor risk.