- Melbourne, Florida, United States
- On-site
- Manager
- 15+ years
Lead the strategy, development, implementation, and continuous improvement of the IT Security GRC program and oversee compliance, risk management, and security operations across the organization.
Responsibilities
- Lead the strategy, development, implementation, and continuous improvement of the IT Security GRC program
- Establish and maintain information security governance frameworks, policies, standards, procedures, and control objectives
- Lead compliance programs aligned to frameworks such as CMMC, NIST 800-171, ISO 27001, SOC 2, NIST CSF, PCI‑DSS, HIPAA, GDPR
- Direct security risk management activities, including risk identification, assessment, treatment, exception management, and reporting
- Oversee the development and maintenance of the information security risk register and remediation tracking processes
Requirements
- Bachelor’s Degree
- Graduate Degree
- Master’s degree
- Nice to have: Strong working knowledge of third-party risk management
- Nice to have: Vendor security review processes