Senior GRC Cybersecurity Lead (Hybrid)

NRECA International; Arlington (VA); Hybrid; USD 130,000 - 170,000; Full time

Benefits offered by this job

Hybrid work schedule (up to 2 days rem

Job summary

NRECA International is seeking a Cybersecurity Governance professional to lead risk identification, assessment, and lifecycle governance for our enterprise. This role partners with IT and business leaders to strengthen controls, ensure regulatory compliance, and improve governance processes in a hybrid work environment.

The position emphasizes collaborating with stakeholders to prioritize risks, manage third‑party risk, and report on security metrics.

Qualifications

• Experience leading cybersecurity governance programs across an enterprise.
• Ability to analyze findings and advise on mitigation strategies.

Responsibilities

• Lead activities identifying, assessing, and prioritizing cybersecurity risks and controls.
• Develop and maintain risk registers, metrics, and governance policies.
• Coordinate with regulators and auditors to track and remediate issues.
• Test controls for design and effectiveness and monitor remediation status.
• Advise leaders on improvements and risk escalations.
• Facilitate monthly security risk meetings and report metrics.
• Guide third‑party risk management and assessments.
• Define risk requirements for systems across cloud, on premise, and third‑party environments.

Skills

Cybersecurity governance

Risk assessment

Regulatory compliance

Stakeholder advisory

Job description

NRECA International is seeking a Cybersecurity Governance professional to lead risk identification, assessment, and lifecycle governance for our enterprise. This role partners with IT and business leaders to strengthen controls, ensure regulatory compliance, and improve governance processes in a hybrid work environment.

The position emphasizes collaborating with stakeholders to prioritize risks, manage third‑party risk, and report on security metrics.