Senior Information Security GRC Director

Knights of Columbus; New Haven (CT); Hybrid; USD 112,000 - 191,000; Full time

Benefits offered by this job

401(k) retirement plan with company-m匹

Health insurance options

Paid holidays and generous leave

Job summary

Knights of Columbus is seeking an Associate Director of Governance, Risk, and Compliance (GRC) to lead the information security GRC program, align with regulatory requirements, and report to the Deputy CISO. You will partner with Legal, Privacy, Compliance, IT, and Audit to improve policies, risk management, and governance across the organization.

The role requires five years in GRC, strong analytical and documentation skills, and CIS/CISM/CRISC/CISA certifications preferred.

Qualifications

• Five years of relevant experience within the Governance, Risk, and Compliance field.
• Proven working experience performing the functions listed under the core responsibilities section.
• Bachelor’s degree in information security, Cyber Security, Computer Science, or another related field.

Responsibilities

• Lead, develop, mentor, and retain a high-performing Information Security GRC team.
• Establish team objectives, performance measures, responsibilities, and development plans.
• Develop, maintain, and improve the information security governance, risk, and compliance strategy and multi-year roadmap.
• Keep up with ongoing trends in the GRC community and ensure up-to-date practices.
• Develop and maintain information security policies and standards.
• Coordinate with related functions to ensure security standards are practical and aligned.
• Maintain the information security risk register and exception processes.
• Align information security risk with the broader enterprise risk framework.
• Develop and maintain an information security control framework.
• Oversee compliance activities related to applicable laws and standards.
• Coordinate and manage audits, assessments, and examinations.
• Serve as primary liaison for Internal Audit, External Audit, and regulators.
• Establish indicators, dashboards, and security maturity measures.
• Develop third-party risk activities.
• Governance for new technologies and major initiatives.
• Partner with Privacy, Legal, and Compliance on overlapping requirements.
• Stay aware of cybersecurity regulation changes and impact.

Skills

Governance, Risk, and Compliance

Complex information processing

Documentation & workflows

Multi-tasking

Communication skills

NIST CSF knowledge

Deadline-driven

Legal & regulatory standards (NYDFS,GD

CISSP

CISM

CRISC

CISA

Education

Bachelor’s degree in information security / Cyber Security / Computer Science

Job description

Knights of Columbus is seeking an Associate Director of Governance, Risk, and Compliance (GRC) to lead the information security GRC program, align with regulatory requirements, and report to the Deputy CISO. You will partner with Legal, Privacy, Compliance, IT, and Audit to improve policies, risk management, and governance across the organization.

The role requires five years in GRC, strong analytical and documentation skills, and CIS/CISM/CRISC/CISA certifications preferred.