Senior Cyber GRC Program Manager

Georgia Institute of Technology; Atlanta (GA); On-site; USD 112,000 - 130,000; Full time

Job summary

Georgia Tech, located in Atlanta, seeks a senior GRC practitioner to lead the cybersecurity governance, risk, and compliance function within the Office of Information Technology. You will design practical, future-state processes and drive risk-based decisions across diverse domains.

Responsibilities include maturing GRC programs, vendor risk oversight, AI governance, and executive reporting to campus leadership, with collaboration across legal, privacy, procurement, and audit teams.

Qualifications

• Bachelor's degree in cybersecurity, information systems, business administration, public policy, risk management, computer science, or a related field.
• 10+ years of progressively responsible experience in cybersecurity, governance, risk management, compliance, audit, or a related discipline.
• Proven experience building, transforming, maturing, and uplifting GRC programs across multiple frameworks such as SOC 2, ISO 27001/27701, HIPAA, PCI-DSS, NIST, FERPA, GDPR.
• Hands-on implementation, assessment, or program leadership across multiple regulatory domains and vendor risk.
• Ability to communicate clearly with senior leaders and cross-functional teams; analytical and detail-oriented.
• Strong program management, prioritization, and cross-functional collaboration in decentralized environments.

Responsibilities

• Lead the maturation of Georgia Tech's cybersecurity GRC function by applying advanced program management and regulatory expertise.
• Define and maintain a cybersecurity GRC roadmap, operating model, process architecture, maturity targets, and success measures.
• Serve as a trusted advisor to cybersecurity leadership and institutional stakeholders on risk, governance, and compliance issues.
• Maintain governance structures for decision-making, escalation, and executive oversight.
• Oversee control framework management, vendor risk, third-party risk, and continuous monitoring.
• Develop executive dashboards and reporting for risk posture, control effectiveness, and audit readiness.

Skills

GRC program management

Regulatory compliance

Risk assessment

Stakeholder communication

AI governance

Executive reporting

Education

Bachelor's Degree or equivalent

Master's Degree (preferred)

Tools

ServiceNow GRC/IRM

OnSpring

RSA Archer

OneTrust

MetricStream

LogicGate

Job description

Georgia Tech, located in Atlanta, seeks a senior GRC practitioner to lead the cybersecurity governance, risk, and compliance function within the Office of Information Technology. You will design practical, future-state processes and drive risk-based decisions across diverse domains.

Responsibilities include maturing GRC programs, vendor risk oversight, AI governance, and executive reporting to campus leadership, with collaboration across legal, privacy, procurement, and audit teams.