grc manager

Stellar Hunters

<div><h4 class="jobSectionHeader">Job Summary</h4>
We are seeking a Cyber GRC Manager to lead and mature the company&rsquo;s cyber governance, risk, and compliance (GRC) program. The successful candidate will partner with Security, IT, Legal, Risk, and business stakeholders to design, implement, and operate controls, policies, and risk management practices that reduce cyber risk and support business objectives. This role will own compliance initiatives, third-party risk assessments, policy lifecycle management, and metrics to drive continuous improvement across the organization.<h4 class="jobSectionHeader">
Key Responsibilities</h4><h5 class="jobSectionHeader">
GRC Strategy &amp; Program Leadership</h5><ul><li>
Develop and evolve a risk-based cyber GRC strategy that aligns with enterprise risk appetite and business priorities.</li><li>
Lead the GRC program, including governance forums, risk assessment cadence, control frameworks, and remediation tracking.</li><li>
Partner with senior leadership to translate regulatory and business requirements into practical program objectives and roadmaps.</li></ul><h5 class="jobSectionHeader">
Policy, Standards &amp; Control Management</h5><ul><li>
Maintain and enhance information security policies, standards, and procedures; ensure clear ownership and version control across the policy lifecycle.</li><li>
Define and maintain control objectives mapped to frameworks (e.g., NIST CSF, ISO 27001, SOC 2) and ensure consistent implementation across teams.</li><li>
Coordinate control testing, assessments, and remediation activities with internal teams and external assessors.</li></ul><h5 class="jobSectionHeader">
Risk Assessment &amp; Third-Party Risk Management</h5><ul><li>
Conduct enterprise and technology risk assessments; identify, evaluate, and prioritize cyber risks and mitigation plans.</li><li>
Own third-party risk management processes including vendor risk assessments, due diligence, contract security requirements, and ongoing monitoring.</li><li>
Work with procurement and vendor owners to remediate deficiencies and reduce supply chain risk.</li></ul><h5 class="jobSectionHeader">
Compliance &amp; Audit Support</h5><ul><li>
Manage compliance programs and readiness for relevant regulations and standards (e.g., SOC 2, ISO 27001, GDPR, HIPAA where applicable).</li><li>
Act as primary liaison for internal and external audits, prepare evidence and reporting, and coordinate remediation activities.</li><li>
Maintain documentation and continuous evidence of controls to support attestations and regulatory reporting.</li></ul><h5 class="jobSectionHeader">
Metrics, Reporting &amp; Continuous Improvement</h5><ul><li>
Define and report GRC metrics and dashboards (e.g., risk posture, control maturity, remediation timelines, vendor risk status) to leadership and stakeholders.</li><li>
Use data and trend analysis to identify program gaps, recommend improvements, and measure the effectiveness of risk reduction efforts.</li><li>
Develop and maintain GRC playbooks, runbooks, and process documentation to enable repeatable, auditable practices.</li></ul><h4 class="jobSectionHeader">
Required Qualifications - Skills &amp; Experience</h4><ul><li>
Bachelor&rsquo;s degree in Information Security, Cybersecurity, IT, Risk Management, or a related field, or equivalent practical experience.</li><li>
5+ years of hands-on experience in cyber governance, risk, and compliance, information security, or related roles.</li><li>
Practical knowledge of common security frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2) and experience mapping controls to frameworks.</li><li>
Experience managing third-party/vendor risk assessments, contract security requirements, and remediation workflows.</li><li>
Strong communication and stakeholder management skills with the ability to influence technical and non-technical audiences.</li><li>
Analytical mindset with experience developing risk assessments, metrics, and executive-level reporting.</li><li>
Familiarity with GRC platforms, risk assessment tools, ticketing systems, and common productivity software.</li></ul><h4 class="jobSectionHeader">
Preferred Qualifications</h4><ul><li>
Relevant certifications such as CISSP, CISM, CRISC, CISA, or CDPSE preferred.</li><li>
Experience supporting SOC 2, ISO 27001, or other third-party audits and working with external assessors.</li><li>
Background in cloud security, identity and access management, or secure software development lifecycle practices.</li><li>
Experience implementing or operating GRC tooling (e.g., Archer, RiskLens, OneTrust, ServiceNow GRC) is a plus.</li></ul><h4 class="jobSectionHeader">
Work Environment &amp; Compensation</h4><ul><li>
Full-time position with a hybrid onsite/remote model; occasional travel and after-hours engagement may be required to support assessments and incident response activities.</li><li>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</li><li>
Opportunities for professional development, cross-functional collaboration, and career growth within Security, IT, and Risk functions.</li><li>
Inclusive, respectful culture that values diversity, equity, and work-life balance.</li></ul></div>

Cyber GRC Manager

Franklin Fitch

<div>
 
 This role leads the firm&rsquo;s Governance, Risk, and Compliance (GRC) program, including regulatory compliance, enterprise risk management, and audit assurance. It also owns Information Security AI governance, ensuring responsible and compliant use of AI and machine learning technologies.
 
 
 The Manager oversees SOC 2 and ISO 27001 programs, a small team and works cross functionally with key business units.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Maintain security policies, standards, and governance framework
 </li>
 <li>
 Lead SOC 2 and ISO 27001 audits (readiness, evidence, remediation)
 </li>
 <li>
 Ensure compliance with regulatory, client, and contractual requirements
 </li>
 <li>
 Manage exceptions, risk acceptances, and compensating controls
 </li>
 <li>
 Maintain required security authorizations for regulated engagements
 </li>
 <li>
 Coordinate evidence collection and track renewal timelines
 </li>
 <li>
 Lead AI security governance and define usage standards
 </li>
 <li>
 Implement controls for AI tools (data, access, third-party risk)
 </li>
 <li>
 Support client/regulatory inquiries and track emerging requirements
 </li>
 <li>
 Maintain the risk register and conduct periodic assessments (including AI and third-party risk)
 </li>
 <li>
 Develop reporting and translate risks into business impact
 </li>
 <li>
 Assess vendor security posture and track remediation
 </li>
 <li>
 Lead audit coordination and track findings and improvements
 </li>
 <li>
 Manage and develop a team of three analysts
 </li>
 <li>
 Standardize processes and set priorities
 </li>
 <li>
 Partner across Security, Legal, Compliance, Privacy, and Data teams
 </li>
 <li>
 Support client assessments and due diligence
 </li>
 </ul>
 
 
 
 
 
 Qualifications
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree (relevant field preferred)
 </li>
 <li>
 7&ndash;10 years in information security, GRC, audit, or risk
 </li>
 <li>
 Experience with SOC 2 and/or ISO 27001
 </li>
 <li>
 Team leadership experience
 </li>
 <li>
 Relevant certifications (e.g., CISSP, CISM, CRISC, CGRC) preferred
 </li>
 <li>
 Experience with GRC tools, third-party risk, and AI/data governance
 </li>
 <li>
 Strong communication and stakeholder management skills
 </li>
 </ul>
 
 
</div>

Information Security Manager

Confidential Government

<div>
 
 
 Senior Manager &ndash; Governance, Risk and Compliance (GRC)
 
 
 
 
 Standard Title:
 
 Risk &amp; Compliance Manager
 
 
 
 Company:
 
 Confidential Government Entity
 
 
 
 Location:
 
 Riyadh, Saudi Arabia
 
 
 
 Workplace Type:
 
 On-site
 
 
 
 Employment Type:
 
 Full-time
 
 
 
 Seniority Level:
 
 Mid&ndash;Senior Level
 
 
 
 
 
 
 Job Purpose
 
 
 
 The Senior Manager &ndash; Governance, Risk and Compliance (GRC) is responsible for leading the design, implementation, and continuous enhancement of governance structures, enterprise risk management, and compliance systems. The role ensures that institutional practices align with applicable laws, regulatory requirements, and approved governance frameworks, while supporting organizational effectiveness, risk resilience, ethical conduct, and sound decision-making.
 
 
 
 
 
 
 Key Accountabilities &amp; Responsibilities
 
 
 
 
 1. Governance Framework &amp; Institutional Oversight
 
 
 <ul>
 <li>
 Develop, review, and maintain governance frameworks, charters, policies, and procedures to ensure clarity of authority, roles, and accountability.
 </li>
 <li>
 Ensure consistent application of governance principles across all organizational levels.
 </li>
 <li>
 Provide advisory support to executive management and governance committees on governance-related matters.
 </li>
 <li>
 Oversee documentation and enforcement of delegation of authority matrices and decision-rights frameworks.
 </li>
 <li>
 Promote ethical standards, conflict-of-interest management, and institutional integrity.
 </li>
 </ul>
 
 
 2. Enterprise Risk Management (ERM)
 
 
 <ul>
 <li>
 Establish and lead an integrated Enterprise Risk Management framework covering strategic, operational, financial, regulatory, and reputational risks.
 </li>
 <li>
 Direct risk identification, assessment, prioritization, and aggregation processes.
 </li>
 <li>
 Maintain and update the enterprise risk register and ensure alignment with organizational objectives.
 </li>
 <li>
 Define risk appetite and tolerance levels in coordination with senior leadership.
 </li>
 <li>
 Monitor emerging risks and ensure proactive mitigation strategies are in place.
 </li>
 <li>
 Prepare comprehensive risk reporting for senior management and oversight committees.
 </li>
 </ul>
 
 
 3. Compliance &amp; Regulatory Management
 
 
 <ul>
 <li>
 Develop and implement organization-wide compliance programs, policies, and controls.
 </li>
 <li>
 Ensure full compliance with all applicable laws, regulations, directives, and supervisory requirements.
 </li>
 <li>
 Monitor regulatory developments and assess their impact on organizational policies and operations.
 </li>
 <li>
 Coordinate with regulators, oversight bodies, and external stakeholders as required.
 </li>
 <li>
 Oversee management of compliance breaches, investigations, corrective actions, and preventive measures.
 </li>
 <li>
 Promote compliance awareness, training, and a culture of accountability.
 </li>
 </ul>
 
 
 4. Internal Controls, Audit &amp; Assurance
 
 
 <ul>
 <li>
 Design and strengthen internal control frameworks to safeguard assets, ensure data integrity, and enhance operational effectiveness.
 </li>
 <li>
 Coordinate with internal and external audit functions during planning, execution, and follow-up.
 </li>
 <li>
 Review audit findings and ensure timely implementation of remediation plans.
 </li>
 <li>
 Monitor control effectiveness and drive continuous improvement initiatives.
 </li>
 <li>
 Support quality assurance efforts to enhance compliance, efficiency, and governance maturity.
 </li>
 </ul>
 
 
 5. Leadership, Capability Building &amp; Stakeholder Management
 
 
 <ul>
 <li>
 Lead, coach, and develop direct reports and GRC professionals.
 </li>
 <li>
 Build internal capabilities in governance, risk management, and compliance across departments.
 </li>
 <li>
 Act as a trusted advisor to senior leadership and key stakeholders.
 </li>
 <li>
 Facilitate cross-functional collaboration to embed GRC practices into core business processes.
 </li>
 <li>
 Contribute to organizational resilience, sustainability, and long-term value creation.
 </li>
 </ul>
 
 
 Qualifications &amp; Experience
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Business Administration, Finance, Accounting, Law, Risk Management, or a related discipline (Master&rsquo;s degree preferred).
 </li>
 <li>
 8&ndash;12 years of progressively responsible experience in governance, risk, compliance, audit, or related functions.
 </li>
 <li>
 Prior experience within government entities or regulated environments is strongly preferred.
 </li>
 <li>
 Strong understanding of governance principles, risk management methodologies, and compliance frameworks.
 </li>
 <li>
 Professional certifications are an advantage (e.g., CRMA, CIA, CISA, CERM, CGR, ISO 31000).
 </li>
 </ul>
 
 
 Core Competencies &amp; Skills
 
 
 <ul>
 <li>
 Strategic thinking and sound professional judgment.
 </li>
 <li>
 Advanced analytical, risk assessment, and problem-solving skills.
 </li>
 <li>
 Strong leadership, communication, and influencing abilities.
 </li>
 <li>
 High ethical standards, independence, and confidentiality.
 </li>
 <li>
 Excellent report writing and presentation skills.
 </li>
 <li>
 Fluency in Arabic and English.
 </li>
 </ul>
 
 
 Alignment &amp; Compliance (Headlines Only)
 
 
 <ul>
 <li>
 
 Saudi Vision 2030
 
 </li>
 <li>
 
 National Governance Frameworks
 
 </li>
 <li>
 
 Regulatory &amp; Supervisory Authority Requirements
 
 </li>
 <li>
 
 Public Sector Accountability &amp; Transparency Standards
 
 </li>
 </ul>
 
 
 Recommended Industries
 
 
 <ul>
 <li>
 Government Administration
 </li>
 <li>
 Investment Management
 </li>
 <li>
 Real Estate
 </li>
 <li>
 Retail
 </li>
 </ul>
 
 
 Job Functions
 
 
 <ul>
 <li>
 Risk &amp; Compliance
 </li>
 <li>
 Accounting / Auditing
 </li>
 <li>
 Quality Assurance
 </li>
 </ul>
 
 
</div>

Senior Manager - Governance, Risk and Compliance

Link x Talent

Job title: Manager&ndash; Governance, Risk and ComplianceLocally available candidates (*_preferred_*)We are looking for a talented governance and risk management specialist as a Manager to combine governance, risk and compliance experience with advanced decision support capabilities to help clients&rsquo; drive sustainable value for all stakeholders. Corporate governance and compliance are critical components for companies, and we guide them through the complex regulatory landscape to better understand the impact on their business.Key Accountabilities:<ul><li>Support with establishing framework for corporate governance, risk management, and compliance management.</li><li>Review regulatory developments and assess their impact on the client&rsquo;s compliance landscape.</li><li>Support with development of policies and procedures to ensure compliance with applicable laws and regulations.</li><li>Lead risk management activities, identify potential risks, and develop mitigation strategies.</li><li>Provide advisory support on internal audit activities, for audit plans, audit reports and periodic updates to the Board and senior management of the client.</li><li>Provide guidance and training to client staff and internal teams on GRC related matters.</li><li>Collaborate with senior management and other departments to align the client&rsquo;s GRC strategies with overall organizational goals.</li><li>Set performance objectives, provide guidance and mentorship, and conduct regular performance evaluations.</li><li>Support and mentor junior team members with their skill and career development.</li><li>Foster a positive and collaborative work environment, promoting teamwork and professional development.</li><li>Support the Leadership in business development related activities.</li><li>Identify new business opportunities, prepare, and present proposals to the clients.</li><li>Support Partners in their relationship management responsibilities, with current and prospective clients.</li><li>Manage the junior team&rsquo;s members utilization on projects and conduct their performance assessment.</li><li>Collaborate across business units and functions.</li></ul>Qualifications and Experience :<ul><li>University degree in Accounting/Business/Finance/Commerce (Bachelor/Master)</li><li>Master&rsquo;s in Business Administration from a leading business school with specialization in Finance / Economics / International Business (preferred)</li><li>Profession certifications ACA, CIA, CIMA CPA, or ACCA (preferred)</li><li>7+ years&rsquo; experience in corporate governance / risk management / compliance / audits;</li><li>Good knowledge of governance principles and frameworks, regional regulatory landscape, internal audit, and risk management frameworks;</li><li>Strong interpersonal skills with proven leadership qualities and an entrepreneurial mindset;</li><li>Political awareness, professional expertise, financial orientation, self-starting initiative, cross cultural awareness, organization astuteness and team spirit;</li><li>Demonstrable evidence of the ability and experience in setting out a clear strategic direction, leading and inspiring others to achieve a common purpose;</li><li>Possesses excellent analytical, and critical thinking skills; and</li></ul>Possesses strong written and verbal communication skills with experience in interacting with and presenting to the external stakeholders, English as well as Arabic (preferred)Job Type: Full-timePay: From QAR1.00 per monthWork Location: In person

Manager– Governance, Risk and Compliance

Decagon

<div>About Decagon
Decagon is the leading conversational AI platform empowering every brand to deliver concierge customer experiences.
Our technology enables industry-defining enterprises like Avis Budget Group, Block&rsquo;s Cash App and Square, Chime, Oura Health, and Hunter Douglas to deploy AI agents that power personalized, deeply satisfying interactions across voice, chat, email, SMS, and every other channel.
We&rsquo;re building a future where customer experiences are being redefined from support tickets and hold music to faster resolutions, richer conversations, and deeper relationships. We&rsquo;re proud to be backed by world-class investors who share that vision, including a16z, Accel, Bain Capital Ventures, Coatue, and Index Ventures, along with many others.
We&rsquo;re an in-office company, driven by a shared commitment to excellence and velocity. Our values &mdash; Just Get It Done, Invent What Customers Want, Winner&rsquo;s Mindset, and The Polymath Principle &mdash; shape how we work and grow as a team.<h2 class="jobSectionHeader">
About the Team</h2>
The Security Engineering team at Decagon protects the platform that powers the most advanced conversational AI agents for enterprise customers across voice, chat, email and SMS. We build the security foundations that enable Decagon's AI agents to handle sensitive customer data with complete trust while defending against sophisticated, AI-enabled threats at massive scale.
Our mission is to secure magical support experiences, ensuring that AI agents and human agents can collaborate safely to help users resolve their issues while maintaining the highest standards of security and privacy.<h2 class="jobSectionHeader">
About the Role</h2>
Join Decagon as a Compliance Manager and play a critical role in securing customer trust as we scale to serve Fortune 500 and international enterprises. Working closely with the head of security and compliance, you'll be responsible for the day-to-day execution of our compliance program and customer security engagements. This is a high-impact role where you'll directly contribute to closing enterprise deals by efficiently managing security communications with customers, supporting compliance audits, and improving our security documentation. Perfect for someone who thrives in a high impact organization with attention to detail, excellent writing skills, and who wants to build expertise in enterprise AI compliance.<h2 class="jobSectionHeader">
In this role, you will</h2><ul><li>
Drive compliance certifications including SOC 2 Type II, ISO 27001, PCI DSS, HIPAA, and CCPA</li><li>
Automate or execute compliance evidence collection, ensuring all controls are properly documented and audit-ready</li><li>
Maintain and improve security documentation including policies, procedures, and customer-facing security collateral</li><li>
Support customer security assessments by preparing materials for security reviews and helping address technical inquiries from Fortune 500 security teams</li><li>
Manage security and compliance topics in RFPs end-to-end, coordinating responses across engineering, product, and legal teams to deliver accurate, timely responses to enterprise customers.</li><li>
Coordinate with contractors and vendors to maintain response quality and meet timelines during peak sales periods</li><li>
Build and optimize repeatable processes to scale our GRC operations to hundreds of enterprise customers</li><li>
Partner with sales engineering to understand customer security requirements and proactively prepare responses for common concerns</li><li>
Partner with Sales and Customer Success to accelerate deal velocity by proactively addressing customer security concerns with published content</li><li>
Collaborate with Security, Engineering, and Product teams to translate compliance requirements into actionable technical controls and ensure new features meet regulatory standards</li><li>
Establish vendor risk management programs to assess and monitor third-party security risks across our supply chain</li></ul><h2 class="jobSectionHeader">
Your background looks something like this</h2><ul><li>
3-5 years of GRC experience in high-growth SaaS or technology companies, with direct responsibility for compliance programs</li><li>
Proven track record successfully contributing to SOC 2, ISO 27001, or similar enterprise compliance certifications</li><li>
Experience in data privacy regulations including CCPA, GDPR, and emerging AI governance frameworks</li><li>
Strong project management skills with ability to coordinate cross-functional teams under tight deadlines</li><li>
Excellent written and verbal communication skills to translate complex security concepts for diverse audiences</li><li>
Working knowledge of technical security controls and ability to collaborate effectively with engineering teams</li></ul><h2 class="jobSectionHeader">
Even better if you have</h2><ul><li>
Experience with AI/ML compliance frameworks and understanding of unique risks in conversational AI systems</li><li>
Background in healthcare or financial services with knowledge of HIPAA or PCI requirements</li><li>
Track record of building GRC programs at companies scaling from startup to enterprise</li><li>
Experience with GRC platforms like Vanta, Drata, or SecureFrame to automate compliance workflows</li><li>
Understanding of cloud security particularly Google Cloud Platform compliance and security features</li></ul><h2 class="jobSectionHeader">
Compensation</h2>
$190K &ndash; $275K + Offers Equity
Benefits
We proudly offer the following benefits for our full-time employees:<ul><li>
Take what you need vacation policy</li><li>
Medical, Dental, and Vision benefits for you and your family</li><li>
Life Insurance and Disability Benefits</li><li>
Retirement Plan (e.g., 401K, pension)</li><li>
Parental Leave</li><li>
Fertility and family building benefits through Carrot</li><li>
Daily lunches and snacks in the office to keep you at your best</li></ul>
These benefits are described in more detail in Decagon&rsquo;s policies, may vary by location, and can change at any time according to applicable compensation and benefits plans.
Compensation Range: $190K - $275K</div>

Governance, Risk, and Compliance Manager

VaporVM

<div>
 
 We are seeking a highly skilled and proactive
 
 Team Lead &ndash; Cybersecurity
 
 with a strong focus on
 
 Governance, Risk &amp; Compliance (GRC)
 
 and
 
 Security Operations Center (SOC)
 
 functions. The ideal candidate will be responsible for leading cybersecurity operations, ensuring regulatory compliance, managing organizational risk, and overseeing real-time threat detection and response.
 
 
 This role requires a strategic thinker with hands-on technical expertise who can bridge the gap between compliance frameworks and operational security.
 
 
 
 Key Responsibilities
 
 
 
 
 Leadership &amp; Strategy
 
 
 <ul>
 <li>
 Lead and mentor the cybersecurity team across GRC and SOC functions.
 </li>
 <li>
 Define and implement cybersecurity strategies aligned with business objectives.
 </li>
 <li>
 Establish security governance frameworks, policies, and procedures.
 </li>
 <li>
 Act as the primary point of contact for cybersecurity initiatives and escalations.
 </li>
 </ul>
 
 
 Governance, Risk &amp; Compliance (GRC)
 
 
 <ul>
 <li>
 Develop, implement, and maintain information security policies, standards, and controls.
 </li>
 <li>
 Ensure compliance with international standards such as ISO 27001, NIST, and CIS frameworks.
 </li>
 <li>
 Conduct risk assessments, gap analysis, and risk treatment planning.
 </li>
 <li>
 Manage internal and external audits, including regulatory and client compliance requirements.
 </li>
 <li>
 Oversee third-party/vendor risk assessments and security due diligence.
 </li>
 </ul>
 
 
 Security Operations (SOC)
 
 
 <ul>
 <li>
 Oversee daily SOC operations including monitoring, alert triaging, and incident response.
 </li>
 <li>
 Manage and optimize SIEM, SOAR, EDR/XDR, and threat intelligence platforms.
 </li>
 <li>
 Lead incident investigation, root cause analysis, and remediation efforts.
 </li>
 <li>
 Develop and maintain incident response plans, playbooks, and runbooks.
 </li>
 <li>
 Ensure continuous improvement of detection use cases and threat-hunting capabilities.
 </li>
 </ul>
 
 
 Risk Management &amp; Incident Handling
 
 
 <ul>
 <li>
 Identify, assess, and prioritize cybersecurity risks across the organization.
 </li>
 <li>
 Lead incident response activities and coordinate with internal and external stakeholders.
 </li>
 <li>
 Conduct post-incident reviews and implement corrective/preventive actions.
 </li>
 </ul>
 
 
 Reporting &amp; Stakeholder Management
 
 
 <ul>
 <li>
 Prepare and present security reports, dashboards, and risk posture to senior management.
 </li>
 <li>
 Collaborate with IT, DevOps, Legal, and Compliance teams to ensure integrated security practices.
 </li>
 <li>
 Provide security awareness and training programs across the organization.
 </li>
 </ul>
 
 
 Required Qualifications &amp; Skills
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Information Security, Computer Science, or a related field.
 </li>
 <li>
 6&ndash;9 years of experience in cybersecurity with strong exposure to both GRC and SOC environments.
 </li>
 <li>
 Hands-on experience with SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel).
 </li>
 <li>
 Strong understanding of security frameworks (ISO 27001, NIST, CIS Controls).
 </li>
 <li>
 Experience in risk management, compliance audits, and policy development.
 </li>
 <li>
 Solid knowledge of incident response, threat detection, and vulnerability management.
 </li>
 <li>
 Leadership experience managing technical teams.
 </li>
 </ul>
 
 
 Preferred Certifications
 
 
 <ul>
 <li>
 CISSP, CISM, or CISA
 </li>
 <li>
 ISO 27001 Lead Implementer / Lead Auditor
 </li>
 <li>
 CEH, CompTIA Security+, or equivalent
 </li>
 <li>
 Microsoft Security / Azure Security certifications (preferred)
 </li>
 </ul>
 
 
 Key Competencies
 
 
 <ul>
 <li>
 Strong analytical and problem-solving skills
 </li>
 <li>
 Leadership and team management
 </li>
 <li>
 Excellent communication and stakeholder management
 </li>
 <li>
 Decision-making under pressure
 </li>
 <li>
 High level of integrity and accountability
 </li>
 </ul>
 
 
</div>

Team Lead – Cybersecurity (GRC & SOC)

Arpatech

ob Title: Information Security ManagerLocation: Karachi (on-site)Shift: 9 AM to 6 PMWe&rsquo;re looking for an experienced Information Security Manager to lead our organization&rsquo;s security operations, compliance efforts, and governance strategy while fostering a culture of cyber resilience across all departments. You&rsquo;ll be responsible for designing and implementing robust security frameworks, ensuring regulatory compliance, managing risks, and driving proactive threat detection and response strategies.Key Responsibilities:-Lead and manage enterprise-wide information security initiatives.-Oversee SOC operations and implement SIEM solutions (experience with Wazuh is highly preferred).-Drive vulnerability management and coordinate with DevOps teams to embed security in CI/CD pipelines (DevSecOps).-Develop, maintain, and enforce information security policies, standards, and procedures aligned with frameworks such as ISO 27001, NIST, and other industry best practices.-Own the organization&rsquo;s GRC (Governance, Risk, and Compliance) function and ensure adherence to relevant laws, regulations, and frameworks.-Act as a key liaison during security audits and assessments.-Promote awareness and training to build a strong internal security culture.--Strong understanding of SDLC.Requirements:-Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or a related field (Master&rsquo;s degree is a plus).-Minimum 8 years of experience in Information Security, with at least 4 years in a leadership or managerial role.-Strong understanding of security frameworks like ISO 27001, NIST, and risk management methodologies.-Hands-on experience with SOC tools, SIEM platforms, vulnerability scanning, and DevSecOps practices.-Proven track record in security compliance, governance, and risk management.-Experience working with or managing Wazuh or similar SIEM platforms is highly desirable.-Industry certifications such as CISSP, CISM, or CISA are a strong plus.Job Type: Full-timeWork Location: In personWork Location: In person

Search 10000+ Grc manager jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 grc manager jobs Near Me

Cyber GRC Manager

Information Security Manager

Senior Manager - Governance, Risk and Compliance

Manager– Governance, Risk and Compliance

Governance, Risk, and Compliance Manager

Team Lead – Cybersecurity (GRC & SOC)

Information Security Manager