InfoSec GRC Manager - Controls, Compliance & Automation

Verisign; Reston (VA); Hybrid; USD 136,000 - 184,000; Full time

Benefits offered by this job

Discretionary bonus

Stock awards

Job summary

Verisign in Reston, VA seeks a hands-on Manager for Information Security Compliance to lead the governance, risk, and compliance program across CIS controls, NIST CSF, and SP 800-53. You will drive automated evidence collection, manage external regulatory requests, and mentor a team of practitioners to deliver measurable improvements.

The role emphasizes automation, cross‑functional collaboration with engineers and leadership, and a hybrid work arrangement in Reston with a competitive base

Qualifications

• Domain expertise in cyber security standard methodologies and security control frameworks.
• Experience in a public company environment managing compliance across multiple regulatory and security frameworks.
• Technical understanding of security controls and how to implement them in a complex enterprise IT environment.
• Ability to develop and refine control tests tailored to specific control implementations.
• 8+ years progressively responsible experience in information security governance, risk, compliance, or security assessment/audit.
• 4+ years of security control assessment experience.
• 2+ years of related experience leading or managing others.
• Professional security management certifications preferred (CISSP/CISA/CISM/CRISC).

Responsibilities

• Manage a security control assurance program, including planning and executing test procedures, assessing design and operating effectiveness, and driving identified gaps to remediation.
• Manage compliance with external regulatory obligations, translating requirement into control objectives, coordinating regulator information requests, and tracking remediation commitments.
• Build a continuous control monitoring program by collaborating with control and system owners and translating security control requirements into automated tests.
• Interface directly with technical engineering teams to design and improve security controls, define implementation requirements, and determine what effective security control operations should look like.
• Report on compliance and control assessment results, risk trends, and remediation priorities to audiences ranging from controls owners to senior leadership through clear reporting, executive briefings, and dashboards.
• Assist with the development of enterprise information security policies and standards.
• Lead a team of practitioners, setting priorities and quality standards, and ensuring commitments are met.

Skills

CIS Controls

SOC 2/3

NIST CSF

NIST SP800-53

Regulatory compliance

Control testing

Automation

Leadership

Education

Bachelor's degree in Information Systems, Computer Science, or related field

Job description

Verisign in Reston, VA seeks a hands-on Manager for Information Security Compliance to lead the governance, risk, and compliance program across CIS controls, NIST CSF, and SP 800-53. You will drive automated evidence collection, manage external regulatory requests, and mentor a team of practitioners to deliver measurable improvements.

The role emphasizes automation, cross‑functional collaboration with engineers and leadership, and a hybrid work arrangement in Reston with a competitive base