Senior Manager, GRC Engineering – Special Programs

This is a fully remote position, open to applicants in United States.

📋 Description

• Take complete ownership of program management - ensure overall accountability for the delivery health of Special Programs, client satisfaction metrics, and the execution by cross-functional teams.

• Lead the resolution of executive-level escalations - act as the main authority for high-risk engagements, collaborating with managers to resolve intricate issues and rebuild client trust.

• Track delivery and timelines - oversee milestones across the entire portfolio, identify potential delays early, and take proactive measures to assist teams in meeting project deadlines.

• Uphold operational delivery standards - maintain established quality benchmarks and engagement playbooks across all teams, ensuring managers are accountable for consistent execution.

• Manage resource allocation and capacity - monitor workload distribution among direct reports, alert executive leadership to bandwidth risks in advance, and ensure ideal staffing across projects.

• Directly develop first-line managers - provide coaching and mentorship to 4 to 5 direct-report managers to cultivate a culture of accountability, ownership, and operational consistency.

• Propel team performance management - set clear delivery expectations, perform performance evaluations, acknowledge high performers, and directly address execution discrepancies.

• Supervise quality assurance and risk mitigation - evaluate client deliverables and communications across key accounts to ensure accuracy, technical rigor, and alignment with client business objectives.

⛳️ Requirements

• Minimum of 8 years of experience in cybersecurity compliance across frameworks including SOC 2, ISO 27001, and NIST CSF.

• At least 5 years of experience leading mid-sized teams.

• Extensive experience in managing relationships with executive clients.

• Over 8 years of expertise in cybersecurity compliance across SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS, HITRUST, and NIST 800-171 or CMMC frameworks.

• More than 8 years of hands-on experience in authoring, implementing, and enforcing enterprise cybersecurity policies.

• Possession of active professional certifications such as CISA, CISSP, CISM, ISO 27001 Lead Implementer, or CRISC.

• Demonstrated success in managing GRC delivery functions within a managed security service provider or specialized consulting firm.

• Must have authorization to work in the U.S. without requiring visa sponsorship at any point in the future.

🏝️ Benefits

• Career Development: Clear growth path with mentorship and training opportunities.

• Technical Training: Comprehensive onboarding on security and compliance frameworks.

• Competitive Compensation: Competitive base salary with regular performance reviews, merit-based appraisals, and bonus opportunities.

• Growth Opportunity: Early-stage company with significant room for career advancement.

• Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.