Senior Manager, Cybersecurity & GRC

We are seeking a strategic Senior Manager, Cybersecurity & GRC to lead cybersecurity strategy, governance, risk, compliance, and continuous improvement initiatives. This role will partner with executive leadership and oversee key areas including GRC, SOC/MSSP, incident response, cyber resilience, cloud security, third-party risk, and AI security .

Key Responsibilities

• Develop and execute the enterprise cybersecurity strategy and roadmap.
• Lead GRC, risk assessments, policies, controls, compliance, and audit programs .
• Advise CIO, executives, and senior stakeholders on cybersecurity risks and priorities.
• Oversee SOC/MSSP, incident response, vulnerability management, and cyber resilience .
• Establish security governance for AI, GenAI, cloud, and emerging technologies .
• Lead third-party and supply-chain cybersecurity risk management.
• Develop cybersecurity KPIs/KRIs, budgets, business cases, and investment priorities.
• Lead and mentor cybersecurity teams and drive continuous security improvement.

Qualifications

• 12+ years of cybersecurity/information security experience.
• 5+ years in a leadership/management role.
• Strong experience in Cybersecurity Strategy, GRC, Enterprise Risk, and Security Assurance .
• Experience with SOC/MSSP oversight, incident response, cloud security, and compliance.
• Strong knowledge of NIST, ISO 27001, CIS Controls, and SOC 2 .
• Experience presenting cybersecurity strategy and risk to executive leadership.
• Bachelor's degree in Cybersecurity, IT, Computer Science, Engineering, or related field.
• CISSP, CISM, CRISC, CCSP, or GIAC certification is an asset.

If you're a senior cybersecurity leader with strong GRC and strategic experience, we'd like to hear from you.