Senior GRC Manager - Cybersecurity & Compliance (Remote)

BECU; California; Hybrid; USD 156,000 - 191,000; Full time

Benefits offered by this job

401(k) Match up to 3%

Annual 4% 401(k) contribution

Medical, Dental and Vision

PTO + Exchange Program

Tuition Reimbursement

Volunteer time off + donation match

Job summary

BECU is seeking a Senior Cybersecurity Governance, Risk and Compliance (GRC) Manager to lead second‑line oversight, program maturation, and regulatory readiness across the organization. You will drive practical standards, controls, and automated workflows to enhance security maturity and resilience.

Expect to partner across cybersecurity, technology, compliance, and AI governance teams, shaping the governance program and translating requirements into actionable guidance while advancing CCM and

Qualifications

• Typically requires 7 years of cybersecurity experience or related IT, Compliance, or Audit.
• Expertise with FFIEC, GLBA, PCI‑DSS, SOX, and NIST CSF.
• Bachelor’s degree in Information Security, Computer Science or related field; advanced degree preferred.

Responsibilities

• Shape Cybersecurity Governance programs, standards, and guidance across the org.
• Advance second‑line oversight of the control framework and remediation.
• Support cybersecurity regulatory examinations (NCUA, WA DFI) and align evidence and responses.
• Translate frameworks and regulatory expectations into practical standards and operating practices.
• Develop and improve Continuous Control Monitoring (CCM) and reporting dashboards.
• Lead risk-based remediation and accountability discussions with owners.

Skills

GRC frameworks

Regulatory exams

Cybersecurity governance

Stakeholder influence

AI governance

Education

Bachelor’s degree

Advanced degree preferred

Tools

Power BI

Power Automate

Power Platform

GRC tools

Job description

BECU is seeking a Senior Cybersecurity Governance, Risk and Compliance (GRC) Manager to lead second‑line oversight, program maturation, and regulatory readiness across the organization. You will drive practical standards, controls, and automated workflows to enhance security maturity and resilience.

Expect to partner across cybersecurity, technology, compliance, and AI governance teams, shaping the governance program and translating requirements into actionable guidance while advancing CCM and