GRC Security Lead: ISO 27001 & Risk Management

The Phoenix Group; Charlotte (NC); Hybrid; USD 95,000 - 116,000; Full time

Benefits offered by this job

Hybrid work model

Relocation assistance

Certification sponsorship

Job summary

The Phoenix Group Advisors in Charlotte, NC seeks a skilled GRC leader to establish and drive the organization's risk and compliance program, with emphasis on ISO 27001 and executive visibility. You will manage risk assessments across apps, infrastructure, cloud, and vendors, coordinate audits, and develop dashboards for senior leadership while embedding privacy controls.

The role offers a hybrid work model, opportunities for professional growth, and relocation consideration as the organization

Qualifications

• Bachelor’s degree in cybersecurity, information systems, risk management, or related field.
• 2–5 years in cybersecurity compliance, GRC, risk management, or audit.
• Experience supporting ISO 27001, NIST CSF, SOX, SOC 2, and related frameworks.
• Knowledge of privacy principles and DPIAs/PIAs.
• Familiarity with GRC platforms and control mapping.

Responsibilities

• Lead the development, implementation, and management of the GRC program.
• Perform risk assessments across apps, infra, cloud, vendors, and processes.
• Maintain risk register and tracking until closure.
• Coordinate internal and external cybersecurity audits and assessments.
• Support privacy initiatives including DPIAs and data inventories.
• Review vendor security questionnaires and third-party risk assessments.
• Assist in maintaining cybersecurity policies, standards, and procedures.
• Develop dashboards and metrics for executive reporting.
• Collaborate with Legal, IT, Security, and Infrastructure teams to embed controls.

Skills

Cybersecurity

GRC

Risk management

Audit support

Data privacy

Education

Bachelor’s degree in Cybersecurity or related field

Tools

RSA Archer

ServiceNow GRC

LogicManager

MetricStream

Job description

The Phoenix Group Advisors in Charlotte, NC seeks a skilled GRC leader to establish and drive the organization's risk and compliance program, with emphasis on ISO 27001 and executive visibility. You will manage risk assessments across apps, infrastructure, cloud, and vendors, coordinate audits, and develop dashboards for senior leadership while embedding privacy controls.

The role offers a hybrid work model, opportunities for professional growth, and relocation consideration as the organization