Senior Cybersecurity & GRC Leader (NIST, GDPR, SOX)

Emergent Software; Hartford (CT); On-site; USD 140,000 - 180,000; Full time

Job summary

Emergent Staffing seeks an experienced Cyber Security & GRC Engineer to lead an enterprise-wide security, governance, risk, and compliance program across multiple entities. The role blends strategic leadership with hands-on implementation of controls, audits, and continuous monitoring using Vanta.

Ideal candidates will own the GRC platform, drive SOX ITGC readiness, GDPR practices, and NIST CSF 2.0 alignment, engaging executives and auditors to mature program maturity and readiness.

Qualifications

• Bachelor's degree in CS/IS/Cybersecurity or equivalent experience.
• 7+ years in information security, cybersecurity, or risk management with senior ownership responsibilities.
• Hands‑on experience administering a GRC platform, preferably Vanta.
• Experience implementing, operating, or auditing against NIST CSF, SOX ITGC, and GDPR.
• Strong track record of policy, controls, and governance program development.

Responsibilities

• Own and mature the enterprise cybersecurity and risk management program across a multi-entity organization.
• Design, implement, and maintain a harmonized control framework supporting NIST CSF 2.0, GDPR, and SOX ITGC requirements.
• Lead enterprise governance activities, including risk reviews, KPI/KRI reporting, executive reporting, and steering committee meetings.
• Serve as the primary liaison for auditors, assessors, clients, and internal stakeholders regarding security and compliance matters.
• Administer and optimize Vanta as the enterprise GRC system of record.
• Configure controls, integrations, tests, evidence collection, continuous monitoring, and audit workflows within Vanta.
• Develop, maintain, and manage enterprise security policies, standards, procedures, exceptions, and policy lifecycle processes.
• Lead SOX ITGC readiness and compliance efforts.
• Operationalize GDPR requirements, including records of processing, DPIAs, data subject rights management, vendor oversight, and breach response.
• Conduct NIST CSF 2.0 assessments, maturity reviews, gap analyses, and remediation planning.
• Manage enterprise risk assessments, risk registers, third‑party vendor risk programs, and remediation initiatives.
• Oversee vulnerability management, patch coordination, access reviews, and technical security controls across cloud and on‑premises environments.
• Lead incident response activities, including preparation, detection, containment, recovery, and post‑incident reviews.
• Provide security architecture guidance for new systems, integrations, cloud solutions, and data platforms.
• Build and manage security awareness, phishing simulation, and employee training programs.
• Partner with business and project teams to ensure security and privacy requirements are incorporated into solution design.

Skills

GRC program ownership

Cloud security

Audit liaison

Policy development

Security controls

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

Vanta

NIST CSF 2.0

Job description

Emergent Staffing seeks an experienced Cyber Security & GRC Engineer to lead an enterprise-wide security, governance, risk, and compliance program across multiple entities. The role blends strategic leadership with hands-on implementation of controls, audits, and continuous monitoring using Vanta.

Ideal candidates will own the GRC platform, drive SOX ITGC readiness, GDPR practices, and NIST CSF 2.0 alignment, engaging executives and auditors to mature program maturity and readiness.