Senior Cyber GRC Program Manager

Georgia Tech; Atlanta (GA); On-site; USD 112,410 - 130,000; Full time

Job summary

Georgia Tech seeks a senior GRC practitioner who can independently assess current‑state capabilities, design practical future‑state processes, influence stakeholders, and drive meaningful improvements in a complex institutional environment. Direct the planning and execution of large scale, multi‑discipline projects, and provide leadership over teams across campus.

The role interacts with department heads, IT, legal, and governance bodies to advance risk maturity and regulatory readiness.

Qualifications

• Bachelor’s degree or equivalent in a relevant field.
• 10+ years of experience in cybersecurity, governance, risk management, compliance, audit, or related discipline.
• Deep GRC expertise across controls, risks, testing, evidence standards, and third‑party risk.

Responsibilities

• Lead strategic maturation of GT's cybersecurity GRC function with program management and governance expertise.
• Define a cybersecurity GRC roadmap, operating model, and maturity targets.
• Advise cybersecurity leadership and institutional stakeholders on risk, governance, and technology adoption.
• Maintain governance structures for risk decision‑making and executive oversight.
• Oversee control framework management, evidence standards, and remediation governance.
• Evaluate control effectiveness and recommend enhancements to strengthen risk posture.
• Oversee due diligence and ongoing risk monitoring of third‑party vendors and cloud services.
• Develop AI‑focused cybersecurity GRC capabilities across GT’s operations.
• Develop executive dashboards and reporting for risk posture and compliance readiness.
• Support audit and assurance activities with evidence and remediation coordination.
• Identify opportunities to automate GRC tasks and apply AI where appropriate.
• Foster cross‑functional collaboration across multiple institutional stakeholders.
• Translate complex risk issues into clear business terms for senior leaders.

Skills

GRC program building

Risk assessment

Regulatory compliance

Vendor risk review

AI governance

Executive reporting

Stakeholder influence

Ambiguity navigation

Cyber risk balance

Education

Bachelor’s degree in cybersecurity, information systems, business administration, public policy, risk management, computer science

Related field

Tools

ServiceNow GRC/IRM

Onspring

RSA Archer

OneTrust

MetricStream

Job description

Georgia Tech seeks a senior GRC practitioner who can independently assess current‑state capabilities, design practical future‑state processes, influence stakeholders, and drive meaningful improvements in a complex institutional environment. Direct the planning and execution of large scale, multi‑discipline projects, and provide leadership over teams across campus.

The role interacts with department heads, IT, legal, and governance bodies to advance risk maturity and regulatory readiness.