Cybersecurity Governance Program Manager

What You'll Do:

• Policy Development:
  Finalize and secure formal approval for the enterprise-wide Cybersecurity Policy.
• GRC Platform Integration:
  Lead the completion of the Service Now (SNOW) GRC module integration, ensuring alignment with ISO 27001 requirements.
• Security Standards Implementation:
  Drive the completion and approval of core security standards, including Network Security, Okta, Device Management, Incident Response, Third-Party Risk Management (TPRM), and Logging.
• Process Implementation:
  Design, document, and implement a formal process for managing security exceptions.

• 7+ years of dedicated experience in Third Party Risk Management (TPRM), Vendor Risk Management, or Audit/Risk Advisory.
• Demonstrated experience independently designing, building, or completely re‑engineering a TPRM program from the ground up.
• Multidisciplinary Review Expertise:
  Proven hands‑on experience independently executing vendor assessments across Data Security, Data Privacy, Legal/Regulatory Compliance, and Contract Review.
• Excellent analytical and problem‑solving skills, with the ability to navigate complex vendor structures.
• Exceptional written and verbal communication skills, with experience developing training/policy materials and presenting to leadership.
• Independent and self‑sufficient; capable of executing full scope of work with minimal day‑to‑day oversight and strong time‑management skills to balance operational and project work.
• Previous experience utilizing A.I. tools to complete day‑to‑day job responsibilities specific to Risk Management, Compliance, Governance, Audit, etc.
• Proven ability to read most common software coding languages, and proficiency in writing basic data querying & exporting scripts (e.g., SQL, Python) independently (unassisted by the use of A.I., apps, tools, or the internet).

• Relevant industry certifications (e.g., CTPRP, CISSP, CISA, CIPP, CRISC).
• Experience in the telecommunications, ISP, or high‑growth tech sectors.
• Expertise utilizing standard GRC or TPRM platforms (e.g., JIRA, Service Now, Whistic).

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.