Manager Cyber Security; ESCR​/GRC Cyber

Manager Cyber Security

We are seeking a full-time Manager Cyber Security at Garmin's U.S. headquarters in the Greater Kansas City area. In this role, you will be responsible for leading the team responsible for developing and maintaining the organization's cybersecurity policy framework, supporting GRC program execution and ensuring compliance with applicable regulatory and contractual requirements. This role serves as a key interface between the cybersecurity organization, Internal Audit, Legal, and business stakeholders on matters of security governance and compliance.

Essential functions include leading the Cyber and IT Compliance team in executing the cybersecurity compliance and assurance program, owning and maintaining the enterprise cybersecurity policy framework, standards, and control library, overseeing compliance program management across applicable regulatory frameworks, managing internal and external audit relationships, partnering with business segments, Legal, HR, and Privacy teams on matters involving regulatory compliance, data protection, and associate security obligations, developing and maintaining IT and Security Compliance program metrics and reporting for leadership and board-level audiences, leading the ECSR program, supporting the annual Board of Directors risk presentation content, supporting the annual KMPG NIST CSF Assessment with the ITSEC Compliance team, supporting the annual Cyber insurance renewal process with the ITSEC Compliance team, taking a leading role and key contributor in the emerging Cyber AI Strategy initiative, taking a leadership role in overseeing Cyber Architecture Review Board and process integration with TPRM, AI Governance and IT Architecture Review Board, and being a key contributor and Cyber governance delegate in monthly Legal/Regulatory meeting.

Basic qualifications include a Bachelor's Degree in Management Information Systems, Computer Science, or another technical related field and a minimum of 7 years of relevant experience in cyber security and a minimum of 2 years of leadership experience. Demonstrated ability to manage, develop, and retain technical PM's, strong understanding of cybersecurity principles, frameworks, and industry practices, experience managing budgets, vendor relationships, and resource planning, excellent written and verbal communication skills, including the ability to convey technical requirements and trade-offs to executive and board-level stakeholders, with strong influencing and stakeholder management skills, deep knowledge of multiple compliance and regulatory frameworks, experience managing relationships with external auditors, regulators, and business stakeholders, and familiarity with GRC platforms.

Desired qualifications include relevant certifications (e.g., CISM, CRISC, CISA, CISSP).