Senior Manager, Security GRC

About the role

The Senior Manager, Security GRC will lead AspenView’s enterprise security governance framework, shaping risk posture, compliance strategy, and policy architecture across global operations. Reporting directly to the CISO, you will act as the primary cyber‑risk advisor to executive leadership and translate regulatory requirements into actionable programs.

Key responsibilities

• Own the enterprise GRC strategy and roadmap aligned with business objectives and risk appetite.
• Establish and enforce security policies, standards, and an exceptions‑management process.
• Lead compliance initiatives for NIST CSF, ISO 27001, SOX, GDPR, and CMMC, managing audit relationships.
• Provide cyber‑risk reporting to the CISO, Board, and senior stakeholders, defining risk quantification methods.
• Direct cyber‑supply‑chain risk management, third‑party assessments, and business continuity integration.
• Build and develop a high‑performing GRC team in partnership with Legal, Internal Audit, and business units.

Required profile

• 12+ years of cybersecurity experience with at least 5 years leading enterprise GRC programs.
• Proven ability to translate complex cyber risk into board‑level narratives.
• Strong leadership experience building and scaling high‑performing teams.

Required skills

• NIST CSF, NIST RMF, ISO 27001, ISO 31000
• SOX ITGC, GDPR, CMMC compliance
• Third‑party risk management, supply‑chain security, business continuity methodologies
• CISSP, CISM (required); CRISC, CGEIT (preferred)

What we offer

• Competitive base salary
• Comprehensive benefits and wellness support
• Flexible work model: hybrid, remote, or in‑office
• Growth opportunities and leadership visibility
• Inclusive, purpose‑driven culture