Director, Cybersecurity & GRC

📋 Description Lead cybersecurity program: EDR/MDR, IAM, vulnerability mgmt, incident response. Own IT GRC: direct a GRC Manager; ISO 27001 ISMS; risk and policy lifecycle. Design cross-framework controls across ITGC, SOC 2, ISO 27001, and NIST scopes. Liaise with external auditors; drive audit readiness; track remediation with advisors. Advance incident response and disclosure governance; plan and tabletop exercises. Set data classification, retention, encryption standards; vendor security risk. 🎯 Requirements 10+ years in cybersecurity and/or IT GRC, including 5+ years in leadership (CISO-track). Deep ITGC experience; direct a GRC Manager; ISO 27001 ISMS; risk, controls, policy lifecycle. Breadth across IAM, EDR/MDR, vulnerability mgmt, and incident response; fluent in ISO 27001, SOC 2, NIST CSF/800-53; NIST 1000-171 / CMMC a plus. Experience as external-audit liaison; policy authorship and lifecycle ownership. Strong people leadership and executive communication, including board-quality reporting. Preferred: manufacturing/energy/critical-infrastructure; first-time IT controls environment; CISSP/CISA/CISM/CRISC; GDPR/CCPA familiarity and AI governance collaboration. 🎁 Benefits Competitive salaries and stock options. 100% medical, dental, and vision premiums for employees; 80% for dependents. Paid parental leave: minimum 12 weeks (up to 20 weeks for birthing parents). Generous vacation policies. Accommodations available for interview process.