Senior GRC & Cybersecurity Strategy Manager

BECU; North Carolina; Remote; USD 156,000 - 191,000; Full time

Benefits offered by this job

401(k) Company Match (up to 3%)

4% annual 401(k) contribution by BECU

Medical, Dental and Vision

PTO Program + Exchange Program

Tuition Reimbursement Program

BECU Cares volunteer time off +donatio

Job summary

BECU is seeking a Senior Cybersecurity Governance, Risk and Compliance (GRC) Manager to strengthen our cybersecurity governance and control oversight across the enterprise. You will translate frameworks into practical standards, advance CCM, and drive automation and AI-enabled governance.

Qualified candidates have 7+ years in cybersecurity/IT compliance, experience with FFIEC guidance, GLBA, PCI-DSS and NIST CSF, and a proven ability to influence across departments.

Qualifications

• Bachelor’s degree in Information Security, CS or related field; advanced degree preferred.
• Typically requires 7 years of cybersecurity, IT, Compliance or Audit experience.
• Expertise with FFIEC, GLBA, PCI-DSS, SOX, and NIST CSF frameworks.

Responsibilities

• Develop, evolve, and improve GRC programs and standards.
• Oversee second-line control and remediation with owners.
• Support cybersecurity regulatory examinations (NCUA, WA DFI).
• Translate frameworks into practical standards and operating practices.
• Advance Continuous Control Monitoring and automation.
• Collaborate across teams and communicate risk in dashboards.

Skills

GRC frameworks

FFIEC guidance

GLBA controls

PCI-DSS controls

SOX controls

NIST CSF

Regulatory knowledge

Education

Bachelor’s degree in Information Security / Computer Science or related field

Advanced degree preferred

Tools

Power BI

Power Automate

AI governance platforms

Job description

BECU is seeking a Senior Cybersecurity Governance, Risk and Compliance (GRC) Manager to strengthen our cybersecurity governance and control oversight across the enterprise. You will translate frameworks into practical standards, advance CCM, and drive automation and AI-enabled governance.

Qualified candidates have 7+ years in cybersecurity/IT compliance, experience with FFIEC guidance, GLBA, PCI-DSS and NIST CSF, and a proven ability to influence across departments.