GRC Manager

2 months ago

Dallas, United States Cyber Defense Labs Full time

Role Summary

We are seeking a Governance, Risk, and Compliance (GRC) Manager to serve as a Senior Advisor of our cybersecurity consulting services team, dedicated to a client and required to be on-site at their location. In this role, you will be committed to protecting the client’s critical assets and data. You will ensure the organization’s compliance with industry and regulatory cybersecurity standards while managing information security risks and maintaining governance frameworks. Key responsibilities include supporting the client’s cyber risk management strategy, including vulnerability management, and acting as the primary contact for auditors. The GRC Manager will work closely with security leadership to assess and validate the security program, with a focus on risk management and corporate resiliency.


Essential Job Duties

  • Conduct enterprise-wide, ongoing risk analysis in coordination with compliance and security.
  • Maintain oversight in a GRC-related platform.
  • Identify and address weaknesses in the security program as they relate to privacy, cyber risk, business resiliency and compliance frameworks.
  • Document, formulate and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation.
  • Support oversight of third parties, vendors and business partners to safeguard against undue risk presented by external entities. Escalate to security management and business unit leads when points of weakness are discovered.
  • Analyze and document findings, and recommend and report program gaps to security leadership.
  • Monitor current and proposed security changes impacting regulatory, privacy and security industry best practice guidance. Apply GRC expertise across key lines of business, including products, practices and procedures.
  • Define qualitative and quantitative metrics to assess the success of the security program and provide regular reports to security and business leadership.
  • Ensure security and technology teams maintain up-to-date configuration documentation for systems and processes.
  • Attend and fully engage in change and project management meetings.
  • Liaison with auditors, both internal and external, to maintain and implement controls for compliance and privacy laws.
  • Develop and implement risk mitigation strategies and controls to address identified risks and ensure compliance with security standards and regulations.
  • Establish and maintain information security governance frameworks, policies, and procedures to guide the organization in managing and protecting sensitive information.
  • Threat & Vulnerability Management: Perform regular threat assessments and vulnerability scans, coordinating with relevant teams to remediate risks and strengthen the organization’s security posture.
  • Act as a point of contact for disaster recovery and business continuity as it relates to security frameworks, compliance and privacy laws.
  • Perform other duties as assigned.


Qualifications

Education and Certifications:

  • Bachelor’s degree in computer science, information assurance, MIS or related field, or equivalent industry experience.
  • Holds or is working toward one or more of the following: CISSP, CRISC, CGEIT or GRCP.

Experience:

  • At least 5+ years’ experience in cybersecurity as a practitioner and with at least 2 to 3+ years exposure with various security frameworks.
  • Prior experience with leading GRC systems from vendors such as RSA, MetricStream and Riskonnect.
  • Demonstrated problem-solving capabilities, and ability to manage complex local and international security requirements.
  • Successful track record of managing external entities’ contracts and relationships, and mitigating risks to business development opportunities.

Technical Skills:

  • Experience and understanding of various cybersecurity standards, including but not limited to ISO 27001 and NIST.
  • Familiarity with threat and vulnerability management, including assessment and remediation practices.
  • Familiarity with state, federal and international privacy laws.

Soft Skills:

  • Exceptional written and verbal communication skills, and proven ability to translate security and risk to all levels of the business.
  • Ability to work independently and collaboratively in a fast-paced environment.
  • Attention to detail and a strong commitment to maintaining the confidentiality and integrity of information assets.
  • Self-motivated, directed and well-organized, with the vision to position controls in anticipation of threats.


Physical Requirements

The physical demands and work environment characteristics here are representative of those that must be met by the employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

  • This position requires the individual to be able to meet the physical demands that would require meeting with people in public and private locations, speaking in public and possible additional related demands.
  • The employee must be able to sit or stand for extended periods throughout the workday.
  • The employee must be able to work in various environments, including traveling for extended periods, participating in meetings, and attending events.
  • The employee must be able to use a computer keyboard and mouse, as well as other office equipment.
  • The employee must be able to regularly engage in verbal communication, which includes talking and listening effectively in person, over the phone, and during virtual meetings.
  • The employee is frequently required to use hands to finger, handle or feel objects, tools or controls; reach with hands and arms.
  • The employee should be able to lift and/or move up to 20 pounds.
  • The employee is occasionally required to stand, walk, sit, climb or balance, stoop, kneel, crouch or crawl.
  • Specific vision abilities required by this position include close vision, distance vision, color vision, peripheral vision and the ability to adjust focus.
  • The noise level in the work environment is usually moderate.


Note: the above statements are intended to summarize the nature and level of the work and typical responsibilities and duties being performed by the incumbents of this job. They are not intended to be an exhaustive list of all responsibilities, duties and tasks required of the position.


Equal Opportunity Statement

Cyber Defense Labs is an equal opportunity employer and strives to ensure our workforce reflects the diversity of the communities we serve. All qualified applicants will receive consideration for employment without regard to disability, race, color, religion, sex, national origin, sexual orientation, gender identity, or any other characteristic protected by law.


We are committed to providing reasonable accommodations to qualified individuals with disabilities. If you need an accommodation to participate in the application process, please contact HumanResources@cyberdefenselabs.com.


This job description is for the exempt position of GRC Manager has been approved by management.

  • GRC Security Consultant

    3 weeks ago

    Dallas, Texas, United States Palo Alto Networks Full time

    Job OverviewPalo Alto Networks is seeking a skilled GRC Security Consultant to join our Proactive Services team. As a key member of our advisory team, you will assist in developing risk management, compliance, and security standards for our clients.

  • ServiceNow GRC Developer

    4 weeks ago

    Dallas, United States Futran Tech Solutions Pvt. Ltd. Full time

    Job Title: ServiceNow GRC Developer Location: Dallas, TX Roles and responsibilities: Design, Development and Implementation of ServiceNow customization including, but not limited to core setup, workflow administration, reporting, data imports, custom scripting, and third-party software integrations. Perform advanced customizations including Business...

  • Enterprise GRC Compliance Lead

    4 weeks ago

    Dallas, Texas, United States Cyber Defense Labs Full time

    About the JobCyber Defense Labs is seeking a highly skilled Cybersecurity Risk Management Expert to join our team.In this role, you will serve as a Senior Advisor of our cybersecurity consulting services team, dedicated to a client and required to be on-site at their location.You will ensure the organization's compliance with industry and regulatory...

  • Information Security GRC Analyst

    2 months ago

    dallas, United States Wheeler Staffing Partners Full time

    Information Security GRC AnalystEmployment Type: ContractLocation: Dallas, TX (Hybrid – 2 days onsite per week)Compensation: $43 - $57/hourContract Duration: 3 to 4 months, with potential for assessment and future permanent conversionJob SummaryWe seek an experienced Information Security GRC Analyst to develop, implement, and operationalize Information...

  • Information Security GRC Analyst

    2 months ago

    Dallas, United States Wheeler Staffing Partners Full time

    Information Security GRC AnalystEmployment Type: ContractLocation: Dallas, TX (Hybrid – 2 days onsite per week)Compensation: $43 - $57/hourContract Duration: 3 to 4 months, with potential for assessment and future permanent conversionJob SummaryWe seek an experienced Information Security GRC Analyst to develop, implement, and operationalize Information...

  • Information Security GRC Analyst

    21 hours ago

    Dallas, United States Wheeler Staffing Partners Full time

    Information Security GRC AnalystEmployment Type: ContractLocation: Dallas, TX (Hybrid – 2 days onsite per week)Compensation: $43 - $57/hourContract Duration: 3 to 4 months, with potential for assessment and future permanent conversionJob SummaryWe seek an experienced Information Security GRC Analyst to develop, implement, and operationalize Information...

  • Strategic Business Process Architect for Cloud Service Management

    4 weeks ago

    Dallas, Texas, United States Forhyre Full time

    Job TitleServiceNow GRC/SecOps SpecialistAbout the RoleWe are seeking an experienced Technical Architect to join our team as a ServiceNow GRC/SecOps Specialist. The successful candidate will be responsible for designing and implementing process solutions using ServiceNow, with a focus on Governance, Risk, and Compliance (GRC) and Security Operations...

  • Cybersecurity Risk Management Leader

    4 weeks ago

    Dallas, Texas, United States Palo Alto Networks Full time

    Palo Alto Networks is seeking a highly skilled Cybersecurity Risk Management Leader to join our team. This role will be responsible for leading our Governance, Risk, and Compliance (GRC) team across a comprehensive portfolio of clients.The ideal candidate will have 6+ years of experience performing information security and risk assessments based upon...

  • Access Governance Consultant

    2 days ago

    Dallas, Texas, United States SafePaas Full time

    Access Governance Consultant OpportunitySafePaaS is seeking an experienced Access Governance Consultant to join our team. As a key member of our sales organization, you will be responsible for supporting the sales and marketing teams in driving new business growth. This includes delivering compelling presentations to potential clients showcasing the benefits...

  • IT Implementation Manager

    5 days ago

    Dallas, Texas, United States SafePaas Full time

    Project Manager Job DescriptionSafePaaS is seeking a skilled Project Manager to oversee the implementation of our IT projects. As a key member of our team, you will be responsible for ensuring that all projects are delivered on time, within budget, and to the required quality standards.The ideal candidate will have a strong background in project management,...

  • Solution Developer

    3 days ago

    Dallas, Texas, United States SafePaas Full time

    Job OverviewAs a Solution Developer at SafePaaS, you will play a critical role in supporting the sales and marketing teams in driving new business growth. This includes delivering compelling presentations to potential clients showcasing the benefits of our Access Management and Continuous Controls Monitoring solutions.Your primary objective is to establish...

  • ServiceNow CSM Architect

    4 weeks ago

    Dallas, United States Futran Tech Solutions Pvt. Ltd. Full time

    Job Title: ServiceNow CSM Architect Location: Dallas, TX (Remote) Roles and responsibilities: Design, Development and Implementation of ServiceNow customization including, but not limited to core setup, workflow administration, reporting, data imports, custom scripting, and third-party software integrations. Perform advanced customizations including...

  • ServiceNow Developer

    2 weeks ago

    Dallas, Texas, United States Futran Tech Solutions Pvt. Ltd. Full time

    About Futran Tech SolutionsWe are a technology-driven company based in Dallas, TX, providing cutting-edge solutions to our clients. Our team is passionate about delivering top-notch services, and we're seeking an experienced ServiceNow Developer to join our crew!Job SummaryWe're looking for a seasoned ServiceNow Developer who can design, develop, and...

  • ServiceNow CSM Architect

    4 weeks ago

    Dallas, Texas, United States Futran Tech Solutions Pvt. Ltd. Full time

    Design, develop, and implement ServiceNow customizations, including core setup, workflow administration, reporting, data imports, custom scripting, and third-party software integrations.Perform advanced customizations, such as Business Rules, UI Pages, UI Macros, UI Scripts, Script Includes, Client Scripts, workflows, custom tables, reports, and...

  • Continuous Controls Monitoring Strategist

    2 days ago

    Dallas, Texas, United States SafePaas Full time

    We are seeking a Continuous Controls Monitoring Strategist to join our team at SafePaaS. In this role, you will work closely with the sales team to develop and execute strategies to drive business growth through new customer acquisition. Your key responsibility will be to deliver presentations and demonstrations of our Access Management solutions to...

  • Access Governance and Compliance Expert

    3 days ago

    Dallas, Texas, United States SafePaas Full time

    SafePaaS is seeking a highly motivated Access Governance and Compliance Expert to join our team. In this role, you will work closely with the sales team to develop and execute strategies to drive business growth through new customer acquisition. Your key responsibility will be to deliver presentations and demonstrations of our Access Management solutions to...

  • ServiceNow Customization and Integration Specialist

    4 weeks ago

    Dallas, Texas, United States Futran Tech Solutions Pvt. Ltd. Full time

    At Futran Tech Solutions Pvt. Ltd., we are seeking a highly skilled ServiceNow Customization and Integration Specialist to join our team in Dallas, TX. The successful candidate will be responsible for designing, developing, and implementing customizations and integrations on the ServiceNow platform.Job SummaryWe offer a competitive salary of $120,000 per...

  • ITSM and CSM Professional

    2 weeks ago

    Dallas, Texas, United States Futran Tech Solutions Pvt. Ltd. Full time

    About Futran Tech SolutionsWe're a technology leader based in Dallas, TX, dedicated to delivering exceptional services to our clients. We're currently seeking an experienced ITSM and CSM Professional to join our team!Job DescriptionThis role involves working as a key member of our IT team, responsible for designing, developing, and implementing custom...

  • IT Audit Manager

    3 weeks ago

    Dallas, United States Robert Half Full time

    Job DescriptionJob DescriptionWe are in search of an IT Audit Manager to join our team, based in Dallas, Texas. This role is crucial in our Service industry, where you will be at the forefront of leading the first line of defense and designing process flows. This position offers a contract to permanent employment opportunity. Responsibilities: Identify and...

  • Information Security Governance Specialist

    4 weeks ago

    Dallas, Texas, United States Cyber Defense Labs Full time

    About the RoleCyber Defense Labs seeks an experienced Information Security Governance Specialist to join our team. In this role, you will serve as a Senior Advisor of our cybersecurity consulting services team, dedicated to a client and required to be on-site at their location.You will ensure the organization's compliance with industry and regulatory...