Senior Manager, Governance, Risk and Compliance (REMOTE)

GEICO; Houston (TX); Remote; USD 120,000 - 260,000; Full time

Job summary

An established industry player is seeking a strategic Senior Manager of Governance to lead transformative cybersecurity initiatives. In this pivotal role, you will enhance governance frameworks, implement automation for continuous compliance, and ensure adherence to regulatory standards. Your leadership will foster a high-performing team while collaborating across functions to mitigate risks and drive innovation. With a focus on building effective policies and metrics, you will report directly to executive leadership, making a significant impact on the organization's cybersecurity posture. If you are passionate about governance and compliance, this is an exciting opportunity to shape the future of cybersecurity.

Qualifications

• 7+ years in governance, risk, and compliance, with at least 4 years in leadership.
• Strong knowledge of regulatory frameworks like NY DFS and PCI DSS.
• Experience managing a governance program in a multi-cloud environment.

Responsibilities

• Enhance governance frameworks to support strategic objectives and compliance.
• Design and implement continuous compliance automation in multi-cloud environments.
• Lead internal and external audits, ensuring audit readiness and success.

Skills

Governance, Risk and Compliance

Cybersecurity

Technical Compliance Management

Cloud-hosted Environments

Clear Communication

Leadership Skills

Problem Solving

Education

Bachelor’s degree in Computer Science

Tools

MS Azure

Job description

GEICO is seeking an experienced and strategic Senior Manager of Governance to lead and enhance our organization's governance and automation programs. GEICO is transforming cybersecurity with automation and a risk-based approach. In this role, you will develop and maintain policies, implement continuous compliance monitoring in a multi-cloud and data center environment, and ensure we meet all regulatory compliance and contractual obligations. The ideal candidate will have a proven track record of building effective governance frameworks, automating continuous compliance, creating metrics, meeting all regulatory cyber requirements, demonstrating strong leadership capabilities, and possessing a collaborative mindset.

This is a people manager role.

Key Responsibilities

1. Enhance and mature the existing governance framework and processes to support strategic objectives while meeting regulatory compliance obligations.
2. Define and implement policies, standards, and controls that support risk mitigation and compliance efforts.
3. Ensure cybersecurity exceptions and acceptances do not introduce aggregated risk and address the root causes of systemic exceptions.
4. Define and create dashboards to demonstrate the security posture of the organization.
5. Collaborate on risk management activities related to cyber risks and ensure all cyber risks are accurately managed to closure.
6. Design and implement continuous compliance automation in a multi-cloud and data center environment.
7. Monitor and ensure compliance with regulatory requirements such as NY DFS, PCI DSS, and other standards.
8. Design a governance program to pass all audits and maintain 100% compliance for cybersecurity controls.
9. Manage all cyber issues to closure.
10. Lead internal and external audits, coordinating efforts across the cyber team to ensure audit readiness and successful outcomes.
11. Maintain awareness of emerging regulatory trends and implement necessary adjustments to policies and controls.
12. Build, mentor, and lead a high-performing governance team, fostering a culture of accountability, innovation, and continuous improvement.
13. Promote collaboration and alignment between the governance team and other functions such as IT, Legal, Privacy, Compliance, and Business Units.
14. Regularly report to executive leadership on governance metrics and initiatives.
15. Report on team progress for projects and other key metrics, providing detailed and actionable ideas for process or operating model improvements.
16. Initiate and support performance evaluations of team members.
17. Cultivate a motivating culture that encourages achievement at all levels.
18. Execute change management processes and adapt approaches as necessary.
19. Build and maintain trusting relationships with team members.
20. Proficiently handle difficult conversations regarding development and performance.
21. Manage upward to leadership and provide feedback when appropriate.
22. Administer coaching plans and Performance Improvement Plans.
23. Contribute significantly to team planning processes.

What you will need…

• Deep understanding of Governance, Risk and Compliance, cybersecurity domains, and regulatory frameworks.
• Experience managing technical compliance engineers.
• Proven success implementing large-scale enterprise initiatives.
• Deep technical understanding of cloud-hosted environments, preferably MS Azure.
• Reputation for effective engagement with team members.
• Genuine care for others, investing in career counseling and growth of team members.
• Initiative and creativity in solving problems and driving innovation.
• Clear and concise communication skills tailored to the audience.
• Ownership and leadership maturity, embracing successes and failures.
• Ability to manage multiple assignments across teams.
• Confidence in decision-making.

Qualifications

• 7+ years in governance, risk, and compliance, with at least 4 years in a leadership role.
• Experience managing a governance program in a multi-cloud/hybrid environment.
• Strong knowledge of regulatory frameworks and standards such as NY DFS, PCI DSS, NIST CSF, ISO 27001.
• Relevant certifications (e.g., CISSP, CISM, CISA, CRISC) preferred.
• Strong understanding of security controls in multi-cloud and data center environments.
• Proven experience managing audits and regulatory engagements.
• Excellent verbal and written communication skills for diverse audiences.
• Experience in strategic planning, roadmaps, budgeting, and resource allocation.
• Problem-solving skills, proactive approach, and ability to thrive in ambiguity.
• Bachelor’s degree in Computer Science, Information Systems, or equivalent experience.

Annual Salary: $120,000.00 - $260,000.00

The above salary range is a guideline. Factors such as scope, responsibilities, experience, education, location, and market considerations influence the final offer.