Senior Cybersecurity & GRC Leader

NPK; The Woodlands (TX); On-site; USD 140,000 - 220,000; Full time

Job summary

NPK International inc. is seeking a Senior Manager, Cybersecurity to define and execute the organization’s security strategy, governance, and compliance program. You will lead security operations, risk programs, and audits to safeguard information assets and align with regulatory requirements.

You will collaborate with IT, business units, auditors, and compliance teams to build a unified governance model addressing data protection and enterprise security posture maturity.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (Master's preferred).
• 8+ years in cybersecurity, security governance, or risk management roles.
• Minimum 4 years in a leadership/managerial role.
• Certifications such as CISSP, CISM, CRISC, CGEIT preferred.

Responsibilities

• Align cybersecurity, governance, and compliance programs with business goals and risk appetite.
• Develop and institute holistic security, risk, and compliance objectives and performance metrics.
• Define and enforce enterprise-wide security and compliance policies, standards, and architectures.
• Review and advise on IT and business projects to identify risks early in the lifecycle.
• Establish guiding principles for flexible, scalable, and risk-aligned security governance.

Skills

Cybersecurity

Governance

Risk management

Auditing

Leadership

Regulatory compliance

Cloud security

SIEM

Identity governance

Education

Bachelor’s degree in Cybersecurity

Tools

SIEM

Vulnerability management

Identity governance

Job description

NPK International inc. is seeking a Senior Manager, Cybersecurity to define and execute the organization’s security strategy, governance, and compliance program. You will lead security operations, risk programs, and audits to safeguard information assets and align with regulatory requirements.

You will collaborate with IT, business units, auditors, and compliance teams to build a unified governance model addressing data protection and enterprise security posture maturity.