Sr Cybersecurity Governance, Risk and Compliance Manager

becu; United States; Remote; USD 156,000 - 191,000; Full time

Benefits offered by this job

401(k) Company Match (up to 3%)

4% annual contribution to your 401(k)

Medical, Dental and Vision (family)

PTO Program + Exchange Program

Tuition Reimbursement Program

BECU Cares volunteer time off + donor

Job summary

BECU in the United States is seeking a Senior Cybersecurity Governance, Risk and Compliance (GRC) Manager to strengthen governance, controls, and oversight across the organization. You will translate frameworks into practical standards and partner across cybersecurity, technology, and compliance teams to mature our GRC program.

As a senior contributor, you will advance Continuous Control Monitoring, automation, and AI-enabled capabilities, guiding risk-based decisions and supporting regulatory

Qualifications

• Experience shaping and maturing cybersecurity governance programs.
• Ability to translate frameworks into practical standards and controls.
• Strong collaboration across cybersecurity, technology, and compliance.

Responsibilities

• Shape Cybersecurity Governance with leadership to improve programs and standards.
• Establish second-line oversight of the control framework and drive remediation.
• Support regulatory readiness with internal stakeholders for exams (NCUA, WA DFI).
• Operationalize frameworks into practical standards and operating practices.
• Build and advance Continuous Control Monitoring and automated workflows.
• Modernize GRC through automation and AI-enabled capabilities.

Skills

Cybersecurity governance

Risk management

Regulatory compliance

Cross-functional collaboration

AI governance

Tools

Power BI

Power Automate

Microsoft Power Platform

Job description

Is it surprising to hear that a financial institution of 1.5 million members and over $30 billion in managed assets say that success comes from focusing on people, not profits?

Our \"people helping people\" philosophy has guided us since 1935, driving our deep commitment to serving our members, communities, and each other. When you join our team, you become part of a purpose-driven organization where your work makes a real difference.

While we're proud of our history, we're even more excited about our future. With business and technology transformation on the horizon, there's never been a better time to be part of BECU.

You bring more than your expertise to your role, and that matters here. Your story, perspectives, and lived experiences help shape belonging at BECU and deepen how we connect with and support our employees, our members, and our communities.

PAY RANGE

The Target Pay Range for this position is $156,200.00-$190,800.00 annually. The full Pay Range is $121,200.00 - $225,800.00 annually. At BECU, compensation decisions are determined using factors such as relevant job-related skills, experience, and education or training. Should an offer for employment be made, we will consider individual qualifications. In addition to your salary, compensation incentives are available for the hired applicant. Incentives are performance based and targets vary by role.

BENEFITS - because people helping people starts with supporting you

• 401(k) Company Match (up to 3%)
• 4% annual contribution to your 401(k) by BECU
• Medical, Dental and Vision (family contributions as well)
• PTO Program + Exchange Program
• Tuition Reimbursement Program
• BECU Cares volunteer time off + donation match

IMPACT YOU'LL MAKE:

As a Senior Cybersecurity Governance, Risk and Compliance (GRC) Manager, you'll play a key role in strengthening how BECU protects its members, information, and financial assets through effective cybersecurity governance and control oversight. You'll help shape and mature our cybersecurity governance program, translating frameworks and regulatory expectations into practical standards, controls, and scalable ways of working across the organization. As a senior individual contributor, you'll help establish second-line cybersecurity control oversight, advance Continuous Control Monitoring (CCM), and partner with teams to identify and remediate control gaps. You'll also have an opportunity to modernize GRC through AI, automation, reporting, and connected workflows that reduce manual effort and provide better visibility into cybersecurity risk. Your expertise and ability to influence across cybersecurity, technology, Compliance, and emerging AI governance will help strengthen BECU's security and resilience.

WHAT YOU'LL DO:

• Shape Cybersecurity Governance: Partner with Cybersecurity leadership to develop, evolve, and continuously improve GRC programs, processes, standards, guidelines, and supporting disciplines.
• Advance Control Oversight: Help establish and mature second-line oversight of BECU's cybersecurity control framework, providing credible challenge and partnering with first-line control and solution owners to identify gaps, clarify ownership, and drive remediation.
• Support Regulatory Readiness: Partner with Enterprise Compliance and other stakeholders to support cybersecurity-related regulatory examinations, including engagements involving the NCUA and Washington State DFI, coordinating evidence, responses, findings, and remediation as appropriate.
• Operationalize Cybersecurity Frameworks: Translate cybersecurity frameworks, regulatory expectations, and evolving requirements into practical standards, guidelines, control expectations, and operating practices stakeholders can apply across the organization.
• Build Continuous Control Monitoring: Help advance Continuous Control Monitoring capabilities by connecting cybersecurity requirements with automated monitoring, control-gap identification, issue management, remediation workflows, dashboards, and reporting.
• Modernize GRC Through Automation: Identify opportunities to reduce repetitive manual work using workflow automation, integrations, AI-enabled capabilities, and technologies such as Power BI, Power Automate, and the broader Microsoft Power Platform.
• Strengthen Cybersecurity Maturity: Use established cybersecurity frameworks and assessment results to identify opportunities for improvement, develop actionable plans, and help advance cybersecur

To join our dynamic team, we require candidates to be residents of WA, OR, ID, AZ, TX, GA, SC, NC, CA or VA. If you're located in Washington state and within a reasonable driving distance from Tukwila, we are requesting that you come into our HQ on Tuesdays & Wednesdays. For those candidates that live outside the commute distance of TFC and in any of our approved remote work locations, this role will be remote. Remote or onsite, we are committed to ensuring you are fully engaged and included in our collaborative environment.