Sr Cybersecurity Governance, Risk and Compliance Manager

Is it surprising to hear that a financial institution of 1.5 million members and over $30 billion in managed assets say that success comes from focusing on people, not profits?

You bring more than your expertise to your role, and that matters here. Your story, perspectives, and lived experiences help shape belonging at BECU and deepen how we connect with and support our employees, our members, and our communities.

The Target Pay Range for this position is $-$ annually. The full Pay Range is $ - $ annually. At BECU, compensation decisions are determined using factors such as relevant job-related skills, experience, and education or training. Should an offer for employment be made, we will consider individual qualifications. In addition to your salary, compensation incentives are available for the hired applicant.

Incentives are performance based and targets vary by role.

- because people helping people starts with supporting you

• 401(k) Company Match (up to 3%)

• 4% annual contribution to your 401(k) by BECU

• Medical, Dental and Vision (family contributions as well)

• PTO Program + Exchange Program

• Tuition Reimbursement Program

• BECU Cares volunteer time off + donation match

As a Senior Cybersecurity Governance, Risk and Compliance (GRC) Manager, you'll play a key role in strengthening how BECU protects its members, information, and financial assets through effective cybersecurity governance and control oversight. You'll help shape and mature our cybersecurity governance program, translating frameworks and regulatory expectations into practical standards, controls, and scalable ways of working across the organization. As a senior individual contributor, you'll help establish second-line cybersecurity control oversight, advance Continuous Control Monitoring (CCM), and partner with teams to identify and remediate control gaps.

You'll also have an opportunity to modernize GRC through AI, automation, reporting, and connected workflows that reduce manual effort and provide better visibility into cybersecurity risk. Your expertise and ability to influence across cybersecurity, technology, Compliance, and emerging AI governance will help strengthen BECU's security and resilience.

To join our dynamic team, we require candidates to be residents of WA, OR, , AZ, TX, GA, SC, NC, CA or VA. If you're located in Washington state and within a reasonable driving distance from Tukwila, we are requesting that you come into our HQ on Tuesdays & Wednesdays. For those candidates that live outside the commute distance of TFC and in any of our approved remote work locations, this role will be remote.

Remote or onsite, we are committed to ensuring you are fully engaged and included in our collaborative environment.

• Shape Cybersecurity Governance: Partner with Cybersecurity leadership to develop, evolve, and continuously improve GRC programs, processes, standards, guidelines, and supporting disciplines.
• Advance Control Oversight: Help establish and mature second-line oversight of BECU's cybersecurity control framework, providing credible challenge and partnering with first-line control and solution owners to identify gaps, clarify ownership, and drive remediation.
• Support Regulatory Readiness: Partner with Enterprise Compliance and other stakeholders to support cybersecurity-related regulatory examinations, including engagements involving the NCUA and Washington State DFI, coordinating evidence, responses, findings, and remediation as appropriate.
• Operationalize Cybersecurity Frameworks: Translate cybersecurity frameworks, regulatory expectations, and evolving requirements into practical standards, guidelines, control expectations, and operating practices stakeholders can apply across the organization.
• Build Continuous Control Monitoring: Help advance Continuous Control Monitoring capabilities by connecting cybersecurity requirements with automated monitoring, control-gap identification, issue management, remediation workflows, dashboards, and reporting.
• Modernize GRC Through Automation: Identify opportunities to reduce repetitive manual work using workflow automation, integrations, AI-enabled capabilities, and technologies such as Power BI, Power Automate, and the broader Microsoft Power Platform.
• Strengthen Cybersecurity Maturity: Use established cybersecurity frameworks and assessment results to identify opportunities for improvement, develop actionable plans, and help advance cybersecurity maturity across the…