Senior Cybersecurity GRC Leader - AI-Driven & Remote

BECU; Washington; Hybrid; USD 121,000 - 226,000; Full time

Benefits offered by this job

401(k) Company Match

Medical, Dental and Vision

PTO Program

Tuition Reimbursement

Volunteer time off + donation match

Job summary

BECU is seeking a Senior Cybersecurity Governance, Risk and Compliance (GRC) Manager to strengthen its cybersecurity governance and control oversight across the enterprise. You will help mature the GRC program, translate regulatory expectations into practical standards, and lead second-line oversight with a focus on automation and AI-enabled capabilities.

You will collaborate with Cybersecurity, Compliance, and other teams to implement Continuous Control Monitoring, drive remediation, and

Qualifications

• Bachelor’s degree in Information Security, Computer Science or related field
• Typically 7 years of cybersecurity experience or related IT/Compliance/Audit experience
• Expertise leveraging established GRC frameworks (FFIEC, GLBA, PCI-DSS, SOX, NIST CSF)
• Demonstrated ability to collaborate and influence stakeholder and partner leadership
• Working knowledge of governance, risk, and compliance tools and automation

Responsibilities

• Shape Cybersecurity Governance: develop, evolve, and improve GRC programs, processes, standards and guidelines
• Advance second-line oversight of the cybersecurity control framework and drive remediation
• Support cybersecurity regulatory examinations and coordinate evidence, findings and responses
• Translate regulatory expectations into practical standards, controls and operating practices
• Build Continuous Control Monitoring by linking requirements to automated monitoring and dashboards
• Modernize GRC through automation, AI capabilities and Power Platform tools
• Strengthen cybersecurity maturity across the enterprise with actionable plans
• Drive risk and control remediation with ownership and effective oversight

Job description

BECU is seeking a Senior Cybersecurity Governance, Risk and Compliance (GRC) Manager to strengthen its cybersecurity governance and control oversight across the enterprise. You will help mature the GRC program, translate regulatory expectations into practical standards, and lead second-line oversight with a focus on automation and AI-enabled capabilities.

You will collaborate with Cybersecurity, Compliance, and other teams to implement Continuous Control Monitoring, drive remediation, and