Sr Cybersecurity Governance, Risk and Compliance Manager

Location: Remote within Washington, Oregon, Idaho, Arizona, Texas, Georgia, South Carolina, North Carolina, California, or Virginia. Washington residents within reasonable driving distance of Tukwila must work from headquarters on Tuesdays and Wednesdays; other approved remote locations are remote.

Target pay range: $156,200–$190,800 annually. Full pay range: $121,200–$225,800 annually, plus performance-based incentives.

Company

hirify.global is a member-focused financial institution serving 1.5 million members and managing more than $30 billion in assets.

What you will do

• Develop and continuously improve cybersecurity governance programs, standards, guidelines, and operating practices.
• Establish second-line oversight of cybersecurity controls, identify gaps, clarify ownership, and drive remediation.
• Support regulatory examinations involving the NCUA and Washington State DFI, including evidence, responses, findings, and remediation.
• Build continuous control monitoring through automated monitoring, issue management, remediation workflows, dashboards, and reporting.
• Modernize GRC using workflow automation, integrations, AI-enabled capabilities, Power BI, Power Automate, and Microsoft Power Platform.
• Partner with cybersecurity, technology, Compliance, architecture, IAM, and AI governance teams while developing metrics and supporting responsible AI governance.

Requirements

• Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent experience.
• Typically 7 years of cybersecurity, IT, Compliance, or Audit experience.
• Expertise with cybersecurity and compliance frameworks including FFIEC, GLBA, PCI DSS, SOX, and NIST CSF.
• Experience with GRC tools, risk evaluation automation, enterprise risk integration, reporting, and third-party cyber risk.
• Knowledge of firewalls, vulnerability management, penetration testing, system configuration controls, and encryption.
• Ability to influence stakeholders, work independently, exercise sound judgment, and explain technical and business topics.

Nice to have

• CISSP, CCSP, CISM, GIAC, CISA, CRISC, PCIP, ISA, QSA, or comparable certification.
• Advanced degree and experience with cybersecurity training, lesson plans, and educational materials.

Culture & Benefits

• People-focused environment guided by a “people helping people” philosophy.
• 401(k) match of up to 3% plus a 4% annual hirify.global contribution.
• Medical, dental, and vision coverage with family contributions.
• PTO program, PTO exchange program, tuition reimbursement, and volunteer time off.
• Opportunity to build second-line cybersecurity control oversight and gain enterprise-level AI, automation, regulatory, and framework experience.