Manager, Cybersecurity GRC, Global

Cybersecurity Department

The Cybersecurity Department at Vantage Data Centers is a dynamic, hands‑on team responsible for the design, implementation, and maintenance of security infrastructure across our global data center footprint. We manage and configure cybersecurity systems, partner with industry‑leading vendors to stay ahead of evolving threats, and integrate cutting‑edge security technologies to ensure the highest level of protection for our facilities and clients.

Our team plays a critical role in designing cybersecurity frameworks for new data center builds, ensuring compliance with industry regulations, and maintaining a balance between innovation, performance, and cost efficiency. If you are passionate about security in a fast‑paced, high‑growth environment, we want you on our team!

This role can be based in Denver, CO.

The Manager, Cybersecurity GRC supports the governance, risk, and compliance (GRC) function to strengthen Vantage Data Centers' cybersecurity posture within assigned regions or functional domains. This role contributes to the development, implementation, and execution of security programs, ensuring alignment with industry frameworks and regulatory requirements while supporting risk identification and mitigation activities.

Partnering cross‑functionally across IT, Engineering, Legal, and other business units, the manager collaborates to support the application of policies, controls, and compliance standards. The position contributes to audit readiness, risk management, and performance reporting, assisting in delivering insights into the organization's security and compliance posture.

This role requires a hands‑on contributor who collaborates with stakeholders, supports GRC initiatives, and promotes a culture of security awareness and continuous improvement.

• Support execution of key components of the cybersecurity GRC program, ensuring implementation of policies, standards, and control frameworks within assigned regions or domains
• Contribute to the development, maintenance, and implementation of cybersecurity policies, standards, and procedures aligned to industry frameworks such as ISO 27001, SOC 2, and NIST
• Support the identification, assessment, and prioritization of cybersecurity risks; assist in tracking and execution of risk treatment plans in alignment with defined risk tolerance
• Support audit readiness and execution across internal and external audits, including coordination, evidence collection, and remediation tracking
• Participate in control validation activities to support effectiveness and consistency of cybersecurity controls
• Support development and delivery of GRC metrics, KPIs, and dashboards; assist in reporting compliance posture and risk exposure to leadership
• Assist in ensuring adherence to regulatory and customer requirements, including audit support and security‑related obligations
• Collaborate with IT, OT, Engineering, Legal, and PMO teams to support integration of governance and compliance controls into operational processes
• Escalate compliance issues, audit findings, and risks to senior leadership as appropriate and support resolution activities
• Provide guidance and direction to team members and contribute to team development efforts
• Support alignment of GRC activities with broader cybersecurity priorities within assigned scope
• Contribute to improvements in GRC processes, tools, and automation to enhance efficiency and audit readiness
• Additional duties as assigned by Management

• Strong communication skills (verbal and written) with the ability to communicate internally with team members as well as externally with vendors and other service providers.
• Data Center experience is strongly preferred, but not required.
• Bachelor's degree in Information Technology, Cybersecurity, or a related field (or equivalent experience).
• Industry certifications such as CISSP, CISM, CISA, or CCSP preferred.
• 5+ years of experience designing, implementing, and managing cybersecurity programs, ideally within a data center or critical infrastructure environment.
• Strong understanding of security frameworks, compliance requirements, and…