Mgr-Security Gov & Compliance

OP RaaS; Eads (CO); In loco; USD 120.000 - 190.000; Tempo pieno

Descrizione del lavoro

OP RaaS seeks a seasoned GRC leader to drive governance, risk, and compliance across the enterprise. You will lead a team of analysts and advisors, coordinate audits, and align controls with regulatory standards.

You will partner with executives and technical teams to strengthen the control environment, develop security policies, and oversee remediation initiatives, while promoting enterprise-wide GRC awareness.

Competenze

• 5+ years in governance, risk or compliance with 2+ years in leadership.
• Strong knowledge of SOX, NIST, ISO 27001, COBIT.
• Experience managing audits, risk assessments and remediation.
• Ability to develop policies and control frameworks.
• Certifications such as CISA/CRISC/CISM or ISO 27001 Lead preferred.

Mansioni

• Lead and manage the GRC team, including hiring and performance development.
• Oversee enterprise compliance and risk programs ensuring regulatory alignment.
• Direct audits and certification processes, address findings and remediation.
• Develop and maintain information security policies, standards and governance.
• Partner with executives to advise on compliance requirements and risks.
• Promote awareness and adoption of governance across the enterprise.
• Strategic leadership to align compliance with business priorities.
• Ensure compliance with laws, regulations, and company policies.
• Perform other duties as assigned.

Conoscenze

GRC Leadership

Audits & Risk

Policy Development

Regulatory Knowledge

Stakeholder Engagement

Formazione

Bachelor’s degree or equivalent

Certifications such as CISA/CRISC/CISM

Descrizione del lavoro

Job Description

POSITION OVERVIEW:

Leads governance, risk, and compliance (GRC) activities to ensure the organization meets regulatory, audit, and internal security requirements. Manages a team of analysts and advisors, oversees compliance assessments, and partners with business and technical stakeholders to strengthen the enterprise control environment

ESSENTIAL FUNCTIONS:

• Lead and manage the GRC team, including hiring, mentoring, and performance development
• Oversee enterprise compliance and risk management programs, ensuring alignment with regulatory and internal standards
• Direct audit and certification processes, providing evidence, addressing findings, and managing remediation
• Develop and maintain information security policies, standards, and governance frameworks
• Partner with executives, business leaders, and technical teams to advise on compliance requirements and risks
• Promote awareness and adoption of governance and compliance practices across the enterprise
• Leadership and team development skills to manage and grow a high-performing GRC function
• Strategic thinking to align compliance and risk management with business priorities
• Comply with all applicable laws/regulations, as well as company policies/procedures.
• Perform other duties as assigned.

QUALIFICATIONS:

• Bachelor’s degree in information security, information systems, business administration, and / or related field or equivalent formal training
• Five (5) years of experience in governance, risk, compliance, or related information security functions, with at least 2 years in a leadership role
• Strong knowledge of regulatory and industry frameworks including SOX, NIST, ISO 27001, and COBIT
• Proven experience managing audits, enterprise risk assessments, and remediation programs
• Ability to develop policies, standards, and control frameworks to support compliance objectives
• Certifications such as CISA, CRISC, CISM, or ISO 27001 lead implementer/auditor preferred
• Influencing and communication skills to engage executives and diverse stakeholders
• Analytical and organizational skills to oversee audits, risk assessments, and compliance programs

JOB CONDITIONS:

• Some travel required