Senior Cyber Security & GRC Lead — Hybrid US Role

Emergent Software (for a client); Hartford (CT); Hybrid; USD 135,000 - 165,000; Full time

Job summary

Emergent Software seeks a senior Cyber Security & GRC Engineer to lead an enterprise-wide cybersecurity, governance, risk, and compliance program across multiple entities in the US. You will own the GRC platform (Vanta), drive a unified framework aligned to NIST CSF 2.0, GDPR, and SOX ITGC, and interact with executives and auditors.

The role demands hands-on leadership, policy development, and continuous monitoring to mature the program and ensure audit readiness across all entities.

Qualifications

• Bachelor's degree in CS, IS, cybersecurity, or equivalent.
• 7+ years of information security or risk management with senior ownership responsibilities.
• Experience implementing, operating, or auditing NIST CSF, SOX ITGC, and GDPR requirements.
• Demonstrated success developing security policies, controls, and governance programs.
• One or more certifications: CISSP, CISM, CRISC, or CISA.
• Strong cloud security, IAM, endpoint security, logging, and security operations.
• Excellent communication with executives, auditors, and technical teams.
• Ability to manage multiple priorities independently and drive accountability.

Responsibilities

• Own and mature the enterprise cybersecurity and risk management program across a multi-entity organization.
• Design, implement, and maintain a harmonized control framework supporting NIST CSF 2.0, GDPR, and SOX ITGC.
• Lead enterprise governance activities including risk reviews, KPI/KRI reporting, and steering committee meetings.
• Serve as primary liaison for auditors, assessors, clients, and internal stakeholders on security and compliance matters.
• Administer and optimize Vanta as the enterprise GRC system of record.
• Configure controls, tests, evidence collection, monitoring, and audit workflows within Vanta.
• Develop, maintain, and manage enterprise security policies, standards, procedures, and policy lifecycle.
• Lead SOX ITGC readiness and GDPR compliance efforts.
• Operationalize GDPR requirements including DPIAs, data subject rights, vendor oversight, and breach response.
• Conduct NIST CSF 2.0 assessments, maturity reviews, gap analyses, and remediation planning.
• Manage enterprise risk assessments, risk registers, third-party risk programs, and remediation initiatives.
• Oversee vulnerability management, patch coordination, access reviews, and security controls across cloud and on-premises.

Skills

Information security leadership

GRC administration (Vanta)

NIST CSF / SOX / GDPR knowledge

Cloud security

Security policy development

Auditing / regulatory compliance

Certifications: CISSP / CISM / CRISC /

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or equivalent

Tools

Vanta

Job description

Emergent Software seeks a senior Cyber Security & GRC Engineer to lead an enterprise-wide cybersecurity, governance, risk, and compliance program across multiple entities in the US. You will own the GRC platform (Vanta), drive a unified framework aligned to NIST CSF 2.0, GDPR, and SOX ITGC, and interact with executives and auditors.

The role demands hands-on leadership, policy development, and continuous monitoring to mature the program and ensure audit readiness across all entities.