Senior Security GRC Lead: Risk, Compliance & IAM

Jobtailor; Columbus (OH); On-site; USD 120,000 - 155,000; Full time

Job summary

Jobtailor is seeking a senior Information Security and Compliance leader to oversee ISPCR and align policies with industry standards. You will drive risk assessments across campus infrastructure, cloud environments, and vendors, delivering mitigation strategies and governance that inform leadership decisions.

With 6+ years in GRC, you will mentor colleagues, communicate complex risk to diverse stakeholders, and advance security maturity across university operations.

Qualifications

• Bachelor’s degree in information technology, cyber security, computer science, or a related field (or equivalent professional experience).
• Minimum of 6 years of direct experience in information security governance, risk, and compliance.
• Broad understanding of IAM, server, networking, application development, and database concepts.
• Final candidates must successfully complete a background check.
• Preferred: 8 to 12 years of relevant governance, risk, and compliance (GRC) experience.
• Preferred: Advanced degree in a relevant technical or business field.
• Preferred: Active professional certifications such as CISA, CRISC, CISM, CISSP, or equivalent specialized GRC certifications.
• Preferred: Deep specialization in NIST SP 800-53 and HIPAA Security/Privacy Rules.

Responsibilities

• Own and operate the university’s Information Security and Privacy Control Requirements (ISPCR).
• Map institutional policies and controls to industry standards and regulatory requirements.
• Develop, refine, and implement compliance practices, processes, maturity models, and key performance metrics.
• Lead complex, large-scope risk assessment initiatives.
• Scope, execute, and oversee Tier 1, Tier 2, and Tier 3 risk assessments across campus infrastructure, cloud environments, third-party vendors, and research data environments.
• Provide technically sound mitigation strategies to system owners, researchers, and technical teams.
• Provide guidance, mentorship, and technical oversight to less experienced colleagues.
• Communicate complex or sensitive risk information to technical and non-technical stakeholders and leadership.
• Facilitate dialogue and persuade stakeholders to adopt secure practices and consider alternative risk-treatment options.

Skills

Information Security Governance

Risk Assessment Initiatives

NIST SP 800-53

Compliance Practices

Identity and Access Management

Cloud Environments

Database Concepts

Networking Concepts

Application Development

Mitigation Strategies

Performance Metrics

Education

Bachelor’s degree in IT / Cyber Security / CS

Advanced degree (Master’s) preferred

Job description

Jobtailor is seeking a senior Information Security and Compliance leader to oversee ISPCR and align policies with industry standards. You will drive risk assessments across campus infrastructure, cloud environments, and vendors, delivering mitigation strategies and governance that inform leadership decisions.

With 6+ years in GRC, you will mentor colleagues, communicate complex risk to diverse stakeholders, and advance security maturity across university operations.