Lead Manager, Security Governance, Risk & Compliance (Cybersecurity)

TL;DR

Lead Manager, Security Governance, Risk & Compliance (Cybersecurity): Support GRC efforts by maintaining policies, assessing risks, and ensuring compliance with regulatory requirements with an accent on third-party risk management, policy exceptions, and security controls. Focus on developing remediation plans, conducting vendor due diligence, performing risk assessments, and participating in audits.

Location: Remote from anywhere in the continental U.S. Applicants must be authorized to work for any employer in the U.S. No visa sponsorship.

Salary: $76,300 - $92,000 USD

Company

World’s largest wish-granting organization uniting communities to grant life-changing wishes to eligible children.

What you will do

• Develop, implement, and maintain GRC frameworks and manage third-party risks.
• Assess and mitigate organizational risks, including control gaps and remediation plans.
• Maintain policies, standards, and baselines for compliance and secure practices.
• Manage risk acceptance, policy exceptions, and tracking mechanisms.
• Participate in security audits and monitor compliance activities.
• Conduct vendor due diligence, risk assessments, and create questionnaires/DPAs.
• Collaborate with departments on TPRM integration and assist Legal with vendor reviews.

Requirements

• Bachelor’s degree in Computer Science or related field or equivalent experience.
• 5+ years total experience, including 2+ years hands-on with enterprise GRC and TPRM solutions.
• Understanding of GRC frameworks (ISO 27001, NIST CSF, SOC, GDPR).
• Experience in IT Compliance, Audit, Security, Cloud Security, PCI, HITRUST, HIPAA, Risk Management.
• Proficiency in Microsoft Office Suite.
• Relevant certifications preferred (CGRC, CRISC, CISA, GRCP).

Nice to have

• Knowledge and experience with OneTrust tools.

Culture & Benefits

• Comprehensive benefits effective day 1: Medical, Vision, Dental, Wellness, HSA/FSA, HRA, Disability, Life Insurance.
• 401(k) with 5% match after one year, student loan forgiveness eligibility.
• Up to 15 PTO days, 10 sick days, 11 holidays, 2 volunteer/personal days, parental leave.
• Laptop, monitor, docking station provided.
• Employee awards, development programs, discounts on theme parks/events.
• Some travel required; ability to work outside standard hours.