Senior Manager, Governance, Risk and Compliance

Title: Senior Manager, Governance, Risk and Compliance
Location: Miami, FL
Duration: Perm
Compensation: 160,000 - 200,000, plus bonus
Work Requirements: US Citizen, GC Holders or Authorized to Work in the U.S.

Senior Manager, Governance, Risk and Compliance

Your Responsibilities on the Team

• Strategically develop, implement, and maintain a comprehensive Cyber GRC framework that aligns with relevant global regulatory requirements and industry standard frameworks.
• Own and maintain centralized IT policy and process governance and oversight on the exceptions management process.
• Define and implement risk management processes and tools to monitor and manage risks effectively.
• Oversee risk assessment and management activities across the organization to identify, assess, and prioritize risks, and develop strategies to mitigate them.
• Be principal participant and work closely with the Director of Security to create the comprehensive cybersecurity program that integrates risk management activities and lessons learned from past organizational events to enhance overall security posture
• Drive and mature the vendor and third-party cyber risk management process.
• Drive and ensuring collaboration between relevant stakeholders from different business areas, IT and cybersecurity to implement effective risk management and compliance into the corporate strategy.
• Collaborate with legal and different stakeholders to interpret the security requirements resulting from different regulations
• Engage with internal audit and external auditors to support IT audits and cybersecurity assessments.
• Lead internal evaluations of IT and cybersecurity controls, presenting findings and recommendations.
• Prepare and present detailed risk and compliance reports to senior management, offering insights and strategic recommendations.
• Develop and maintain a comprehensive security awareness program for employees.
• Lead and mentor a team of GRC professionals, fostering a culture of accountability and continuous improvement.

Education and previous experience

Candidates will be evaluated primarily upon their ability to demonstrate the competencies required to be successful in the role, as described above. For reference, the typical work experience and educational background of candidates in this role are as follows:

• BS or MA in computer science, information security, cybersecurity or a related field
• [10+] years of experience in an IT audit, enterprise risk management (ERM) role or cyber risk management role
• [10+] years of experience with regulatory compliance, risk management frameworks and information security management frameworks (e.g. ISO 27000, NIST CSF, NIST Risk Management Framework, ISO 27005, etc.)

Business and Technical Experience

• Extensive relevant industry experience in Information Technology, Cyber Security, IT Audit, Technology Risk, or GRC.
• In-depth knowledge of standard cyber controls frameworks, including CIS Top18, NIST Cyber Security Framework, NIST 800.53, NIST 800.171 and CMMC.
• Experience managing a third-party cyber risk management process and reviewing reports such as SOC 1 and SOC 2.
• Big 4 IT Audit background or experience in Fortune 100 companies is a plus.
• Experience with people management.
• Proven experience in navigating complex organizations and effective relationship management.

Knowledge and skills

• One or more certifications such as CISA, CISM, CISSP, CRISC, CIA, or CGEIT are desired.
• Ability to translate complex technical topics into easy-to-understand concepts fostering understanding and collaboration between technical and business stakeholder.
• Strong verbal and written communication skills, with the ability to communicate with peers and executive leadership.
• Strong leadership and time management skills.
• knowledge of methodologies and best practices in conducting risk assessments, implementing risk mitigation strategies, and monitoring risk management effectiveness.
• Ability to plan, manage, evaluate, and supervise programs and personnel.
• Ability to effectively lead teams in multiple projects

Physical & Office/Site Presence Requirements

This is primarily a sedentary office position which requires the incumbent to have the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up to 25 lbs. Finger dexterity is necessary.

This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice.

About INSPYR Solutions
Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities

25-13186