Global GRC Lead: Security, Risk & Compliance

Hansen Technologies; Carlsbad (CA); On-site; USD 110,000 - 160,000; Full time

Job summary

Hansen Technologies in Bethlehem, PA, is seeking a hands-on security GRC professional to scale governance, risk, and compliance across the organization. You will design, implement, and evolve security governance initiatives, drive data protection, own business continuity readiness, and collaborate with stakeholders globally to drive change.

You will lead risk assessments, policy development, ISMS improvements, incident response planning, and third‑party risk oversight while translating technical

Qualifications

• Strong background in hands-on security governance, risk management, and compliance delivery.
• Experience implementing and managing data protection controls.
• Working knowledge of frameworks such as ISO 27001, NIST, GDPR, SOC2, ITGC.
• Experience leading BCP/DR programs and incident response scenarios.

Responsibilities

• Lead cybersecurity risk assessments aligned with Hansen's framework and remediation actions.
• Develop and enforce security policies aligned with regulatory requirements.
• Operate and improve the ISMS, maintaining governance docs and risk registers.
• Implement data protection controls and conduct access reviews.
• Lead security awareness programs and measure impact.
• Own Business Continuity and Disaster Recovery planning and testing.
• Manage third-party risk and engage with auditors and regulators.
• Support GRC tooling, risk tracking, and reporting.

Skills

Security governance

Risk management

Compliance delivery

Security awareness

Incident response

BCP/DR planning

Stakeholder management

Effective communication

Job description

Hansen Technologies in Bethlehem, PA, is seeking a hands-on security GRC professional to scale governance, risk, and compliance across the organization. You will design, implement, and evolve security governance initiatives, drive data protection, own business continuity readiness, and collaborate with stakeholders globally to drive change.

You will lead risk assessments, policy development, ISMS improvements, incident response planning, and third‑party risk oversight while translating technical