Senior Manager, Governance, Risk and Compliance

Title: Senior Manager, Governance, Risk and Compliance
Location: Miami, FL
Duration: Perm
Compensation: 160,000 - 200,000, plus bonus
Work Requirements: US Citizen, GC Holders or Authorized to Work in the U.S.

Senior Manager, Governance, Risk and Compliance

Your Responsibilities on the Team

• Strategically develop, implement, and maintain a comprehensive Cyber GRC framework that aligns with relevant global regulatory requirements and industry standard frameworks.

• Own and maintain centralized IT policy and process governance and oversight on the exceptions management process.

• Define and implement risk management processes and tools to monitor and manage risks effectively.

• Oversee risk assessment and management activities across the organization to identify, assess, and prioritize risks, and develop strategies to mitigate them.

• Be principal participant and work closely with the Director of Security to create the comprehensive cybersecurity program that integrates risk management activities and lessons learned from past organizational events to enhance overall security posture

• Drive and mature the vendor and third-party cyber risk management process.

• Drive and ensuring collaboration between relevant stakeholders from different business areas, IT and cybersecurity to implement effective risk management and compliance into the corporate strategy.

• Collaborate with legal and different stakeholders to interpret the security requirements resulting from different regulations

• Engage with internal audit and external auditors to support IT audits and cybersecurity assessments.

• Lead internal evaluations of IT and cybersecurity controls, presenting findings and recommendations.

• Prepare and present detailed risk and compliance reports to senior management, offering insights and strategic recommendations.

• Develop and maintain a comprehensive security awareness program for employees.

• Lead and mentor a team of GRC professionals, fostering a culture of accountability and continuous improvement.

Your Toolbox

Education and previous experience

Candidates will be evaluated primarily upon their ability to demonstrate the competencies required to be successful in the role, as described above. For reference, the typical work experience and educational background of candidates in this role are as follows:

• BS or MA in computer science, information security, cybersecurity or a related field

• [10 ] years of experience in an IT audit, enterprise risk management (ERM) role or cyber risk management role

• [10 ] years of experience with regulatory compliance, risk management frameworks and information security management frameworks (e.g. ISO 27000, NIST CSF, NIST Risk Management Framework, ISO 27005, etc.)

Business and Technical Experience

• Extensive relevant industry experience in Information Technology, Cyber Security, IT Audit, Technology Risk, or GRC.

• In-depth knowledge of standard cyber controls frameworks, including CIS Top18, NIST Cyber Security Framework, NIST 800.53, NIST 800.171 and CMMC.

• Experience managing a third-party cyber risk management process and reviewing reports such as SOC 1 and SOC 2.

• Big 4 IT Audit background or experience in Fortune 100 companies is a plus.

• Experience with people management.

• Proven experience in navigating complex organizations and effective relationship management.

Knowledge and skills

• One or more certifications such as CISA, CISM, CISSP, CRISC, CIA, or CGEIT are desired.

• Ability to translate complex technical topics into easy-to-understand concepts fostering understanding and collaboration between technical and business stakeholder.

• Strong verbal and written communication skills, with the ability to communicate with peers and executive leadership.

• Strong leadership and time management skills.

• knowledge of methodologies and best practices in conducting risk assessments, implementing risk mitigation strategies, and monitoring risk management effectiveness.

• Ability to plan, manage, evaluate, and supervise programs and personnel.

• Ability to effectively lead teams in multiple projects

Physical & Office/Site Presence Requirements

This is primarily a sedentary office position which requires the incumbent to have the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up to 25 lbs. Finger dexterity is necessary.

This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice.