Manager, Cybersecurity Risk and Compliance

The Judge Group; Trenton (NJ); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Health benefits and insurance

PTO

401k

Job summary

The Judge Group is seeking a Manager, Governance, Risk & Compliance (GRC) to lead and continuously improve cybersecurity governance, risk management, compliance, and resilience programs. You will collaborate with business and technology stakeholders to align security and risk objectives with organizational priorities.

The ideal candidate has strong leadership, experience with risk assessments, audits, and third-party risk, plus knowledge of NIST, PCI DSS, SOX, ISO 27001.

Qualifications

• Bachelor's degree or equivalent in information security or risk management.
• 8+ years in governance, risk, compliance, cybersecurity, audit, or related disciplines.
• 3+ years of people leadership experience.
• Experience with cross-functional security, risk, or compliance initiatives.
• Knowledge of NIST, PCI DSS, SOX, ISO 27001 or similar frameworks.
• Experience with risk assessments, audits, policy management, and third-party risk management.
• Strong written and verbal communication skills.

Responsibilities

• Lead enterprise cybersecurity risk assessments and maintain the risk register.
• Develop and communicate risk metrics, dashboards, and recommendations for leadership.
• Manage GRC team operations, including work prioritization and performance development.
• Partner with business and technology leaders to support risk-informed decision making.
• Oversee business continuity and disaster recovery planning, testing, and program maturity.
• Manage third-party and vendor risk assessments, remediation activities, and reporting.
• Support security incident governance processes involving vendors and service providers.
• Coordinate internal and external audit activities, evidence collection, and remediation efforts.
• Ensure compliance with applicable regulatory, privacy, and industry frameworks.
• Manage information security policies, standards, and governance processes.
• Lead cybersecurity awareness and training programs and measure program effectiveness.
• Drive process improvements, automation, and operational efficiency across the GRC program.

Skills

Leadership

Cross-functional leadership

Risk assessments

Third-party risk

Policy management

Cybersecurity frameworks

Audit management

Business continuity

GRC tools

Security risk mgmt tools

Certifications knowledge

Education

Bachelor's degree in Information Security / related field

Tools

GRC platforms

Security risk mgmt tools

Job description

Manager, Governance, Risk & Compliance (GRC)

This is a fulltime salaried position that sits hybrid in the Greater Trenton region of New Jersey.

Competitive health and insurance benefits, PTO, and 401k!

Job Summary

The Manager, Governance, Risk & Compliance (GRC) leads the execution and continuous improvement of the organization's cybersecurity governance, risk management, compliance, and resilience programs. This role manages GRC operations, partners with business and technology stakeholders, and helps ensure security, compliance, and risk management objectives are aligned with organizational priorities. The ideal candidate combines strong leadership skills with expertise in cybersecurity frameworks, risk assessment, audit management, third-party risk, and business continuity planning.

Responsibilities

• Lead enterprise cybersecurity risk assessments and maintain the risk register.
• Develop and communicate risk metrics, dashboards, and recommendations for leadership.
• Manage GRC team operations, including work prioritization, coaching, and performance development.
• Partner with business and technology leaders to support risk-informed decision making.
• Oversee business continuity and disaster recovery planning, testing, and program maturity.
• Manage third-party and vendor risk assessments, remediation activities, and reporting.
• Support security incident governance processes involving vendors and service providers.
• Coordinate internal and external audit activities, evidence collection, and remediation efforts.
• Ensure compliance with applicable regulatory, privacy, and industry frameworks.
• Manage information security policies, standards, and governance processes.
• Lead cybersecurity awareness and training programs and measure program effectiveness.
• Drive process improvements, automation, and operational efficiency across the GRC program.

Minimum Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent practical experience.
• 8+ years of experience in governance, risk, compliance, cybersecurity, audit, or related disciplines.
• 3+ years of people leadership or team management experience.
• Experience leading cross-functional security, risk, or compliance initiatives.
• Knowledge of cybersecurity frameworks and standards such as NIST, PCI DSS, SOX, ISO 27001, or similar.
Experience with risk assessments, audits, policy management, and third-party risk management.
• Strong written and verbal communication skills with the ability to explain technical concepts to diverse audiences.

Preferred Qualifications

• Professional certifications such as CISSP, CISM, CISA, CRISC, or equivalent.
• Experience with GRC platforms and security risk management tools.
• Experience developing KPIs, KRIs, and executive-level reporting.
• Knowledge of business continuity and disaster recovery planning.
• Demonstrated ability to build relationships, influence stakeholders, and drive consensus across teams.