Cyber security GRC Manager

Job Description: Cyber Security GRC Manager

Experience: 7+ Years
Role: Cyber Security – Governance, Risk & Compliance (GRC)

Job Summary:

We are looking for an experienced Cyber Security GRC Manager to manage information security governance, risk assessments, compliance activities, and security policies while ensuring alignment with industry standards and regulatory requirements.

Key Responsibilities:

- Manage Governance, Risk, and Compliance (GRC) activities.
- Conduct information security risk assessments and gap analysis.
- Ensure compliance with ISO 27001, NIST, SOC 2, and other relevant security frameworks.
- Develop and maintain information security policies, procedures, and controls.
- Manage internal and external security audits and compliance assessments.
- Identify, assess, and mitigate cybersecurity risks.
- Coordinate with internal teams, auditors, and stakeholders.
- Monitor regulatory requirements and ensure compliance.
- Prepare risk reports, audit documentation, and management reports.
- Manage third-party/vendor risk assessments.

Required Skills:

- 7+ years of experience in Cyber Security, GRC, Risk Management, or Compliance.
- Strong knowledge of ISO 27001, NIST CSF, SOC 2, and security controls.
- Experience in risk assessments, audits, and compliance management.
- Knowledge of regulatory requirements and information security policies.
- Strong stakeholder management and communication skills.
- Experience with GRC tools is preferred.

Preferred Certifications:

- CISA
- CISM
- CRISC
- CISSP
- ISO 27001 Lead Auditor/Implementer

Education: Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field.