Remote Director of InfoSec GRC & Compliance

Bazeta; Galveston (TX); Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

401(k)

Health & Dental Plan

Disability Insurance

Life Insurance

Holiday & Vacation Pay

Employee Assistance Program

Job summary

Gulf Copper and Manufacturing seeks a Director of Information Security Governance, Risk and Compliance to drive enterprise security strategy. You will oversee policy, risk assessments, control governance, and assurance activities across the organization, reporting to the CISO.

Collaboration with Legal, Quality, and Operations is essential to ensure regulatory and contractual compliance. Responsibilities include maintaining the GRC program, establishing KPIs/KRIs, coordinating audits, and guiding

Qualifications

• Bachelor’s degree or equivalent in a related field with extensive information security governance background.

Responsibilities

• Advise the CISO and executive leadership on material cyber risk and compliance.
• Translate regulatory and contractual security requirements into risk-based business recommendations.
• Lead the Information Security GRC program and maintain the cyber and technology risk-management framework.
• Maintain risk registers and integrate material cyber and technology risks into the enterprise risk process.
• Lead risk assessments, treatment planning, exception management, and executive risk reporting.
• Develop and govern information security policies, standards, and control requirements.
• Establish KPIs and KRIs for risk, compliance, control performance, and remediation.
• Facilitate formal risk acceptance by authorized business and executive risk owners.
• Govern security controls mapping and alignment with applicable frameworks and regulations.

Skills

Leadership

Program management

Cyber risk management

Governance

Education

Bachelor’s degree in information security, cybersecurity, risk management, information systems, business, engineering, or related field

Tools

NIST CSF knowledge

NIST SP 800-171 knowledge

CMMC knowledge

ISO/IEC 27001 knowledge

Job description

Gulf Copper and Manufacturing seeks a Director of Information Security Governance, Risk and Compliance to drive enterprise security strategy. You will oversee policy, risk assessments, control governance, and assurance activities across the organization, reporting to the CISO.

Collaboration with Legal, Quality, and Operations is essential to ensure regulatory and contractual compliance. Responsibilities include maintaining the GRC program, establishing KPIs/KRIs, coordinating audits, and guiding