Sr Cybersecurity Governance, Risk and Compliance Manager

Ladders; United States; Remote; USD 156,000 - 191,000; Full time

Job summary

Ladders is seeking a Senior Cybersecurity Governance, Risk and Compliance Manager to strengthen governance, risk and compliance across the organization in the Finance & Insurance space.

You will partner with cybersecurity leadership and stakeholders to enhance oversight, support regulatory readiness, and drive practical controls aligned with the organization’s risk posture. The role also advances automation, reporting, and continuous control monitoring within GRC processes.

Qualifications

• Bachelor's degree in Information Security, Computer Science or related field; advanced degree preferred.
• 7 years of cybersecurity or related IT, compliance, or audit experience.
• Expertise in GRC frameworks such as FFIEC, GLBA, PCI/DSS, SOX and NIST CSF.
• Certifications such as CISSP, CCSP, CISM, GIAC, CISA, CRISC, or PCI-related certifications preferred.

Responsibilities

• Shape and improve GRC programs and processes in partnership with cybersecurity leadership.
• Establish second-line oversight of cybersecurity controls and drive remediation efforts.
• Support regulatory examinations and coordinate responses with stakeholders.
• Translate cybersecurity frameworks into practical standards and guidelines for the organization.
• Advance continuous control monitoring capabilities through automation and reporting.
• Identify opportunities for automation and AI integration in GRC processes.
• Build trusted relationships across teams to influence cybersecurity initiatives.

Skills

GRC knowledge

Regulatory compliance

Cybersecurity frameworks

Education

Bachelor's degree in Information Security/CS

Job description

For our client, we are seeking a Sr Cybersecurity Governance, Risk and Compliance Manager to join the team of a leader in the Finance & Insurance space.

This role will shape and strengthen cybersecurity governance, risk, and compliance practices across the organization. You will partner closely with cybersecurity leadership and stakeholders across the business to enhance oversight, support regulatory readiness, and drive practical controls that align with the organization’s risk posture. The position also plays a key role in advancing automation, reporting, and continuous control monitoring within GRC processes.

Location: Remote - US based candidates only, no visa sponsorship available

Compensation: $156,200 - $190,800 annually

Responsibilities

• Shape and improve GRC programs and processes in partnership with cybersecurity leadership


• Establish second-line oversight of cybersecurity controls and drive remediation efforts


• Support regulatory examinations and coordinate responses with stakeholders


• Translate cybersecurity frameworks into practical standards and guidelines for the organization


• Advance continuous control monitoring capabilities through automation and reporting


• Identify opportunities for automation and AI integration in GRC processes


• Build trusted relationships across teams to influence cybersecurity initiatives

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field; advanced degree preferred


• 7 years of cybersecurity or related IT, compliance, or audit experience
  
• Expertise in GRC frameworks such as FFIEC, GLBA, PCI/DSS, SOX, and NIST CSF


• Certifications such as CISSP, CCSP, CISM, GIAC, CISA, CRISC, or PCI-related certifications preferred


• Ability to collaborate and influence across various organizational levels

Benefits

• 401(k) company match up to 3%


• 4% annual contribution to your 401(k)


• Medical, dental, and vision coverage, including family contributions


• PTO program plus exchange program


• Tuition reimbursement program


• Volunteer time off and donation match

Our client is an equal opportunity employer. We encourage you to apply even if you don't meet every qualification - your background could be exactly what this team needs.