Remote Senior GRC & Cyber Risk Manager

Ladders; United States; Remote; USD 156,000 - 191,000; Full time

Job summary

Ladders is seeking a Senior Cybersecurity Governance, Risk and Compliance Manager to strengthen governance, risk and compliance across the organization in the Finance & Insurance space.

You will partner with cybersecurity leadership and stakeholders to enhance oversight, support regulatory readiness, and drive practical controls aligned with the organization’s risk posture. The role also advances automation, reporting, and continuous control monitoring within GRC processes.

Qualifications

• Bachelor's degree in Information Security, Computer Science or related field; advanced degree preferred.
• 7 years of cybersecurity or related IT, compliance, or audit experience.
• Expertise in GRC frameworks such as FFIEC, GLBA, PCI/DSS, SOX and NIST CSF.
• Certifications such as CISSP, CCSP, CISM, GIAC, CISA, CRISC, or PCI-related certifications preferred.

Responsibilities

• Shape and improve GRC programs and processes in partnership with cybersecurity leadership.
• Establish second-line oversight of cybersecurity controls and drive remediation efforts.
• Support regulatory examinations and coordinate responses with stakeholders.
• Translate cybersecurity frameworks into practical standards and guidelines for the organization.
• Advance continuous control monitoring capabilities through automation and reporting.
• Identify opportunities for automation and AI integration in GRC processes.
• Build trusted relationships across teams to influence cybersecurity initiatives.

Skills

GRC knowledge

Regulatory compliance

Cybersecurity frameworks

Education

Bachelor's degree in Information Security/CS

Job description

Ladders is seeking a Senior Cybersecurity Governance, Risk and Compliance Manager to strengthen governance, risk and compliance across the organization in the Finance & Insurance space.

You will partner with cybersecurity leadership and stakeholders to enhance oversight, support regulatory readiness, and drive practical controls aligned with the organization’s risk posture. The role also advances automation, reporting, and continuous control monitoring within GRC processes.