GRC Lead – Cybersecurity & Compliance

Role: GRC Lead Cybersecurity & Compliance

We are seeking experienced Governance Risk and Compliance (GRC) professionals to join our cybersecurity function in a strategic role. This position will be instrumental in driving enterprise-wide risk management strengthening security governance frameworks and ensuring regulatory and industry compliance across the organization.

The ideal candidate brings a strong foundation in information security risk management and compliance along with the ability to collaborate across business and technology teams to enhance the organizations overall security posture.

Key Responsibilities

Lead and manage enterprise-level cybersecurity risk assessments and risk management initiatives.

Drive the design implementation and continuous improvement of governance frameworks policies and control environments.

Oversee and ensure alignment with global compliance frameworks such as ISO 27001 SOC 2 PCI-DSS GDPR and NIST.

Act as a key liaison for internal and external audits ensuring audit readiness and effective closure of observations.

Provide strategic oversight on remediation programs risk treatment plans and compliance tracking.

Establish and manage third-party risk management processes including vendor security assessments.

Partner with cross-functional stakeholders (Technology Legal Business and Security teams) to embed compliance and risk-aware culture.

Monitor evolving regulatory landscapes and recommend proactive control enhancements.

Present risk insights compliance posture and governance updates to leadership through dashboards and reports.

Support organization-wide security awareness and governance initiatives.

Required Experience & Skills

5-7 years of experience in Technology GRC Information Security or Risk & Compliance roles.

Strong understanding of global security standards and frameworks (ISO 27001 SOC 2 PCI-DSS GDPR NIST).

Proven experience managing audits risk assessments and compliance programs.

Solid understanding of risk management methodologies and internal control frameworks.

Strong stakeholder management and communication skills with the ability to influence outcomes.

Ability to operate independently while managing multiple priorities in a dynamic environment.

Preferred Qualifications

Industry certifications such as ISO 27001 LA/LI CISA CRISC or CISSP.

Experience with GRC platforms/tools and automation of compliance processes.

Core Competencies

Strategic thinking and analytical mindset

Strong ownership and accountability

Attention to detail with a governance-first approach

Effective collaboration and stakeholder engagement

Required Skills:

Governance Risk and ComplianceInformation SecurityRisk ManagementCompliance ManagementAudit ManagementVendor Risk ManagementRegulatory KnowledgeStakeholder CollaborationStrategic PlanningCommunication