Cybersecurity Governance, Risk & Compliance Lead

Cybersecurity Governance, Risk & Compliance Lead page is loaded## Cybersecurity Governance, Risk & Compliance Lead locations:
Pleasanton (CPC), CA - USAtime type:
Full time posted on:
Posted Todayjob requisition :
21015

Clorox is the place that’s committed to growth – for our people and our brands. Guided by our purpose and values, and with people at the center of everything we do, we believe every one of us can make a positive impact on consumers, communities, and teammates. Join our team.
** Your role at Clorox:
** We are seeking a highly skilled and motivated Cybersecurity Governance, Risk & Compliance (GRC) Lead. This position reports to the Cyber GRC, Privacy, Data Security, and Application Security Product Owner. The mission of this position is to support and improve the company’s cybersecurity program, focusing on driving improvements in cyber risk management related to sensitive data, systems, third party vendors, and cloud environments (at a minimum).
In this role, this individual work with cross functional business units as a trusted security advisor to address cyber risks, ensure compliance with security policies and standards, relevant regulatory requirements, and cybersecurity controls while advising the business and technology leaders ensure informed risk management decisions are made. This individual must understand cyber risks, technologies and effectively communicate them to the business.
The ideal candidate is deadline-driven, detailed oriented, an excellent communicator, with in-depth knowledge of cybersecurity industry and cyber risk management best-practices and has a track record of effectively communicating complex and/or technical information both written and verbally.
** In this role, you will:
*** Assess cyber risks related to vendors, systems and services associated with technology and operational projects.
* Evaluate AI‑enabled services offered by critical vendors for model security, training data governance, and exposure to model manipulation attacks.
* Ensure cloud AI services align with NIST, ISO, SOC2, and privacy frameworks already referenced in the role (NIST, ISO, SOC, GDPR, CCPA).
* Support day-to-day operations by identifying potential areas of cybersecurity compliance risks and ensuring appropriate escalation and coordination of effective corrective actions.
* Collaborate with various technical and non-technical teams to evaluate the effectiveness of security controls, identify and categorize risks, provide improvement recommendations, and communicate outcomes of those activities.
* Assist in process improvement initiatives and the development/implementation of team metrics
* Educate teams across the organization on cyber risk and governance methodologies for maintaining a secure enterprise and meeting regulatory compliance requirements.
* Facilitate the development of security policies and standards. Collaborate with internal subject matter experts to ensure policies,
* Lead the interactions with Internal Audit, manage relevant regulatory requirements, assist in the development of management responses, track, and monitor remediation progress till closure.
* Challenge the first line of defense, validate the required assessments and attestations (PCI, SOX, GDPR, CCPA) report on compliance internally, and provide guidance on compliance as necessary.
* Provide oversight of identifying, classifying, remediating, and mitigating vulnerabilities and the policy exception request process.
* Communicate emerging issues, potential risks, and audit results to key stakeholders, assist in the review, and formulate responses to issues and findings from all sources.
* Develop metrics and reports that provide management visibility into the current cyber risk and compliance posture and trends.
* Work closely with business, technology, and compliance counterparts to understand business objectives, initiatives, and ensure alignment with security policies and best practices.
* Build relationships with business units to deliver security-by-design controls incorporated into projects, architecture, infrastructure, and applications.
* Build relationships with senior leaders to accelerate the adoption of…