Cybersecurity GRC Manager

Role Description

In this GRC role, you will take ownership of evolving our Third-Party Risk Management (TPRM) processes and driving tactical automation across the team. We are looking for a highly proactive self-starter who thrives in ambiguity and operates with exceptional agency. You will identify opportunities to integrate AI into daily operations to streamline GRC tooling and workflows. You will also distill complex technical risks into clear executive presentations for senior leadership and the C-suite. Your tenacity and project-driving capabilities will directly enable GFiber to scale securely during our separation.

In this role, you'll:

• Take full ownership of evolving and maintaining GFiber TPRM processes to optimize our existing tooling platform. Translate complex technical and non-technical risks into actionable insights for diverse stakeholders.
• Identify and execute tactical opportunities to automate GRC workflows using an AI-native approach.
• Apply key cybersecurity frameworks, specifically ISO 27001 and NIST CSF, to manage and mature our risk posture. Act as a proactive project driver by tracking technical inquiries and moving initiatives forward without waiting for direction.
• Draft clear and effective risk presentations for senior leadership and C-suite executives.
• Support M&A and corporate carve-out initiatives by aligning GRC processes with our new operational reality.

At a minimum we'd like you to have:

• Bachelor's degree in Accounting, Finance, MIS or Computer Science or equivalent practical experience.
• 5 years of experience building, maintaining, and evolving Third-Party Risk Management programs and processes.
• Proven ability to design and implement right-sized security controls that balance risk reduction with business velocity and our specific operational environment.
• Experience taking an AI-native approach to problem solving and tactical automation within security or risk teams.
• Professional certifications such as CISA, CRISC, CISSP, or CISM.

It's preferred if you have:

• Experience supporting M&A activity or corporate separations.
• Proven ability to draft and deliver presentations directly to C-suite executives and senior leadership.