GRC Program Lead: AI-Driven Security & Compliance

Astreya; Santa Clara (CA); On-site; USD 150,000 - 230,000; Full time

Job summary

Astreya is seeking an experienced Program Manager to lead Governance, Risk & Compliance initiatives across its infrastructure landscape, spanning Cybersecurity, Cloud Infrastructure, IAM, and Modern Workplace. You will drive AI-powered risk scoring and compliance monitoring at scale.

You will own end-to-end rollout, coordinate cross-functional teams, support audits, and track remediation. The role demands strong stakeholder management, cloud security knowledge, and ability to deliver measurable

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, Risk Management, or related field.
• Proven experience in Program/Project Management within GRC, Cybersecurity, or Infrastructure domains.
• Demonstrated experience coordinating initiatives across multiple technical groups such as Cybersecurity, AppSec, Cloud Infra (AWS/GCP), IAM, and M365/Modern Workplace.
• Working knowledge of AI/ML concepts and their application to security and compliance use cases (e.g., anomaly detection, predictive risk analytics, generative AI for policy/control analysis).
• Familiarity with common GRC frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2, PCI-DSS, CIS Benchmarks).
• Strong understanding of cloud infrastructure security (AWS, GCP), identity/access management principles, and enterprise collaboration platforms (M365).
• Excellent stakeholder management, executive communication, and presentation skills.
• Proven ability to manage multiple concurrent, cross-functional programs in a fast-paced, matrixed environment.
• PMP, PgMP, CISM, CISA, or CRISC certification is a plus.

Responsibilities

• Cross-Functional Program Coordination across Cybersecurity, AppSec, AWS/GCP Infra, IAM, and M365 teams to drive alignment on GRC initiatives.
• Lead the planning, rollout, and adoption of AI-based capabilities across infrastructure and security domains.
• Maintain and evolve the GRC roadmap for infrastructure, track risk posture and remediation across cloud, IAM, and M365.
• Define program charters, milestones, RAID logs, and success metrics; report progress to senior leadership.
• Manage program budgets, resource allocation, and timelines across multiple concurrent work streams.
• Develop executive dashboards and risk heat-maps; communicate AI/automation concepts in business-friendly terms.

Skills

GRC Program Mgmt

Cybersecurity collaboration

Cloud Infra coordination

IAM & M365 knowledge

AI in security

GRC frameworks

Executive communication

Cross-functional leadership

Education

Bachelor's degree in CS/Security

Tools

ServiceNow GRC

Archer

MetricStream

Job description

Astreya is seeking an experienced Program Manager to lead Governance, Risk & Compliance initiatives across its infrastructure landscape, spanning Cybersecurity, Cloud Infrastructure, IAM, and Modern Workplace. You will drive AI-powered risk scoring and compliance monitoring at scale.

You will own end-to-end rollout, coordinate cross-functional teams, support audits, and track remediation. The role demands strong stakeholder management, cloud security knowledge, and ability to deliver measurable