GRC & Information Security Manager

Lancesoft; California (MO); On-site; USD 120,000 - 180,000; Full time

Job summary

Lancesoft seeks a Manager of Governance, Risk, and Compliance (GRC) to oversee and support information security, IT regulatory, privacy risk, third-party risk, and compliance initiatives.

This role will work closely with internal stakeholders, external auditors, and third-party vendors to maintain security controls, manage risks, support regulatory compliance, and improve the organization's overall GRC processes.

Qualifications

• Experience across Governance, Risk, and Compliance (GRC) and Information Security risk management.
• Experience with SOX, ITGC controls, risk assessments, vendor/third-party risk management, and audit coordination.
• Knowledge of PCI DSS, GDPR, CCPA, and NIST CSF compliance requirements.
• Experience using ServiceNow Change Management to support ITGC and compliance.
• Experience developing security policies, standards, procedures, risk metrics, and reporting.

Responsibilities

• Perform Information Security, IT regulatory, and privacy risk assessments across cloud and internal technology environments and systems.
• Lead the Vendor Risk Management / Third-Party Risk Management (TPRM) program, including security risk assessments of third parties and contract reviews to ensure appropriate security controls are in place.
• Lead ongoing compliance activities for IT General Controls (ITGC) and SOX, coordinating with external auditors and internal stakeholders.
• Lead the organization's Security Training and Awareness Program, including periodic security training for specific employee groups.
• Manage the phishing awareness program, including organization-wide simulated phishing campaigns.
• Manage and drive risk remediation activities with internal stakeholders and third parties.
• Manage the ServiceNow Change Management module to support compliance with ITGC change management controls.
• Develop and maintain internal information security policies, standards, and procedures.
• Contribute to additional GRC and compliance programs, including: PCI DSS GDPR CCPA NIST Cybersecurity Framework (NIST CSF)
• Build and maintain strong working relationships with internal stakeholders outside of Information Security.
• Develop and maintain IT risk management metrics, dashboards, and reports.

Skills

GRC

InfoSec

IT risk assessment

SOX/ITGC

Vendor risk

Audit coordination

NIST CSF

PCI DSS/GDPR/CCPA

ServiceNow Change Mgmt

Policy development

Stakeholder mgmt

Job description

Lancesoft seeks a Manager of Governance, Risk, and Compliance (GRC) to oversee and support information security, IT regulatory, privacy risk, third-party risk, and compliance initiatives.

This role will work closely with internal stakeholders, external auditors, and third-party vendors to maintain security controls, manage risks, support regulatory compliance, and improve the organization's overall GRC processes.