Senior Cyber Security & GRC Leader

Emergent Software; Houston (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

Emergent Staffing, a direct-hire opportunity, seeks an experienced Cyber Security & GRC Engineer to lead an enterprise-wide program across multiple entities. The role emphasizes ownership of the GRC platform (Vanta) and compliance with NIST CSF 2.0, GDPR, and SOX ITGC.

The ideal candidate will engage executives, auditors, and engineers while shaping policy and security architecture. The position requires strong leadership, a hands-on security background, and the ability to manage risk, perform

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or equivalent experience.
• 7+ years of information security or risk management with senior program ownership.
• Hands-on experience administering a GRC platform, preferably Vanta.
• Experience implementing NIST CSF, SOX ITGC, and GDPR requirements.
• Proven ability to develop security policies, controls, and governance programs.

Responsibilities

• Own and mature the enterprise cybersecurity and risk management program across multiple entities.
• Design and maintain a harmonized control framework for NIST CSF 2.0, GDPR, and SOX ITGC.
• Lead governance activities, risk reviews, KPI/KRI reporting, and steering committee meetings.
• Serve as liaison for auditors, assessors, clients, and internal stakeholders regarding security and compliance.
• Administer and optimize Vanta as the enterprise GRC system of record.
• Lead incident response planning, detection, containment, and post-incident reviews.
• Provide security architecture guidance for new systems, integrations, cloud solutions, and data platforms.
• Build security awareness, phishing simulations, and employee training programs.

Skills

Excellent communication

Independent worker

Prioritization

Leadership

Education

Bachelor's degree in CS/IS/Cybersecurity

CISSP / CISM / CRISC / CISA

Tools

Vanta

Job description

Emergent Staffing, a direct-hire opportunity, seeks an experienced Cyber Security & GRC Engineer to lead an enterprise-wide program across multiple entities. The role emphasizes ownership of the GRC platform (Vanta) and compliance with NIST CSF 2.0, GDPR, and SOX ITGC.

The ideal candidate will engage executives, auditors, and engineers while shaping policy and security architecture. The position requires strong leadership, a hands-on security background, and the ability to manage risk, perform