GRC Security Manager
Responsibilities:
• Lead enterprise-wide cybersecurity risk reviews to uncover control gaps, assess potential impact, and prioritize remediation plans.
• Create and maintain security policies, standards, and operating procedures that support regulatory expectations and business objectives.
• Partner with departmental leaders to ensure security requirements are clearly communicated, adopted effectively, and consistently followed.
• Build and manage employee security awareness initiatives, updating training content to address evolving threats and measuring program effectiveness.
• Serve as the main point of contact for internal audit activities related to cybersecurity controls, evidence gathering, and issue follow-up.
• Direct compliance efforts tied to applicable security and privacy frameworks, coordinating cross-functional teams to maintain readiness and adherence.
• Develop reporting dashboards and performance indicators that provide leadership with visibility into cyber risk trends and program maturity.
• Oversee third-party security evaluations, including due diligence reviews, risk assessments, and collaboration on contract-related security requirements.
• Identify cybersecurity concerns associated with AI usage and work with technical stakeholders to integrate those risks into the broader control framework.
• Collaborate with privacy and legal partners to align cybersecurity practices with data protection obligations and regulatory requirements.
Qualifications:
• Bachelor’s degree in Cybersecurity, Information Technology, or a closely related discipline; advanced education is preferred.• At least 5–7 years of hands-on experience in cybersecurity governance, risk, and compliance, with broader senior-level experience strongly valued.
• Proven background in performing cyber risk assessments, writing security policies, and managing awareness or training programs.
• Working knowledge of established regulatory and compliance frameworks relevant to security, privacy, and risk management.
• Experience supporting internal or external audit processes and coordinating remediation activities across multiple teams.
• Familiarity with vendor risk management practices, including security reviews for third parties and contract-related control considerations.
• Understanding of enterprise security concepts such as application security, network security, SIEM, and broader governance practices.
• Certifications in security, audit, or risk management are preferred.
Compensation
$150,000.00-$165,000.00 YearlyAbout Us
Technology Doesn't Change the World, People Do.®
Robert Half is the world’s first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.
Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.
All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.
© 2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking “Apply Now,” you’re agreeing to Robert Half’s Terms of Use and Privacy Notice.
