InfoSec Compliance & GRC Leader (Automation)

Koitecc Solutions; Reston, Northern (VA, KY); Hybrid; USD 136,000 - 184,000; Full time

Benefits offered by this job

Discretionary bonus

Stock awards

Job summary

Verisign seeks an experienced Information Security GRC leader to drive enterprise governance, risk, and compliance initiatives from Reston, VA. This hybrid role oversees control assurance, regulatory obligations, and automated monitoring across complex IT environments.

You will brief stakeholders from engineers to senior leadership, evolve security controls, and push for measurable improvements while aligning with company priorities and industry frameworks.

Qualifications

• Domain expertise in cyber security standard methodologies and security control frameworks such as CIS Controls, SOC 2/3 Trust Services Criteria, NIST Cybersecurity Framework, and NIST SP800-53; with hands-on experience testing and mapping controls across frameworks
• Experience in a public company environment managing compliance across multiple regulatory and security frameworks
• Technical understanding of security controls, identifying control objectives, and how to implement them in a complex enterprise IT environment
• Ability to creatively develop and refine control tests tailored to specific control implementations
• 8+ years progressively responsible experience in information security governance, risk, compliance, or security assessment/audit
• 4+ years of security control assessment experience required
• 2+ years of related experience leading or managing others
• Professional security management certification, such as a CISSP, CISA, CISM, or CRISC are preferred
• Bachelor's degree in Information Systems, Computer Science, or related field, or equivalent experience, required

Responsibilities

• Manage a security control assurance program, including planning and executing test procedures, assessing design and operating effectiveness, and driving identified gaps to remediation
• Manage compliance with external regulatory obligations, translating requirement into control objectives, coordinating regulator information requests, and tracking remediation commitments
• Build a continuous control monitoring program by collaborating with control and system owners and translating security control requirements into automated tests
• Interface directly with technical engineering teams to design and improve security controls, define implementation requirements, and determine what effective security control operations should look like
• Report on compliance and control assessment results, risk trends, and remediation priorities to audiences ranging from controls owners to senior leadership through clear reporting, executive briefings, and dashboards
• Assist with the development of enterprise information security policies and standards
• Lead a team of practitioners, setting priorities and quality standards, and ensuring commitments are met

Skills

GRC management

security controls

regulatory compliance

policy & standards

security risk assessment

automation in security

stakeholder briefings

Education

Bachelor's degree in Information Systems/CS

Security certifications preferred

Job description

Verisign seeks an experienced Information Security GRC leader to drive enterprise governance, risk, and compliance initiatives from Reston, VA. This hybrid role oversees control assurance, regulatory obligations, and automated monitoring across complex IT environments.

You will brief stakeholders from engineers to senior leadership, evolve security controls, and push for measurable improvements while aligning with company priorities and industry frameworks.