Governance, Risk, and Compliance (GRC) Manager (Cybersecurity)

Location: Charleston, South Carolina, United States; other listed locations include Austin, Newark, Bellevue, Dallas, Detroit, Ashburn, Nashville, Tulsa, and New York. The work model prioritizes in-person collaboration with flexibility for individual work styles.

Company

hirify.global delivers enterprise technology, managed infrastructure, application modernization, industry-specific software, and AI-driven solutions, including insurance software and business process services for global insurers.

What you will do

• Develop, maintain, and oversee cybersecurity policies, standards, procedures, and internal controls.
• Lead risk assessments across applications, cloud environments, infrastructure, software development processes, and third-party integrations.
• Manage compliance, audit readiness, evidence collection, control assessments, customer security assessments, and regulatory examinations.
• Evaluate control effectiveness, address policy exceptions and compliance deficiencies, and track remediation and formal risk acceptance.
• Oversee third-party risk management, business continuity and disaster recovery governance, risk reporting, and governance forums.
• Supervise GRC personnel, collaborate with cybersecurity and business stakeholders, and present risk and compliance status to executive leadership.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Risk Management, Business Administration, or a related discipline.
• 7+ years of experience in cybersecurity, risk management, governance, regulatory compliance, IT audit, or a related field, including 3+ years of experience in GRC, cybersecurity risk management, policy compliance, or audit-related responsibilities.
• Experience in cybersecurity, risk management, and policy compliance or audit within the financial services sector.
• Strong understanding of cybersecurity principles, security controls, enterprise risk management, and compliance practices.
• Experience developing, implementing, reviewing, or assessing security policies, standards, procedures, and internal controls.
• Experience conducting risk assessments, documenting findings, evaluating control effectiveness, and managing remediation activities.
• Experience supporting internal or external audits, compliance reviews, control assessments, or regulatory examinations.
• Understanding of technology and cybersecurity risks involving applications, cloud platforms, infrastructure, data protection, and software development.
• Experience preparing risk reports, maintaining risk registers, documenting compliance findings, communicating remediation status, coordinating cross-functional activities, and collaborating across cybersecurity, technology, risk, compliance, audit, and business functions.
• Strong analytical, organizational, problem-solving, communication, prioritization, and stakeholder management skills, including the ability to explain technical risks and compliance requirements to technical and business audiences.

Nice to have

• Certifications such as CISA, CISM, CRISC, CISSP, or CGRC.
• Experience with NIST CSF, NIST SP 800-53, ISO 27001, or COBIT.
• Experience with GRC platforms, cloud and SaaS risk assessments, enterprise applications, or complex IT infrastructures.
• Experience with third-party risk assessments, vendor security reviews, technology supply chain risks, business continuity, disaster recovery, or operational resilience.
• Experience developing risk dashboards, compliance metrics, and executive reporting or supporting regulated-industry compliance and audit programs.
• Advanced degree in Cybersecurity, Information Technology, Risk Management, Business Administration, or a related discipline.
• Experience leading, mentoring, or supervising GRC, cybersecurity, risk, or compliance professionals.

Culture & Benefits

• In-person collaboration is prioritized, with flexibility supporting wellbeing, productivity, individual work styles, and life circumstances.
• Inclusive work environment focused on strong connections and community.
• Equal employment opportunity and disability accommodation support are provided.