Senior Director, Cybersecurity GRC
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior cybersecurity GRC leader modernizing governance, risk, compliance, and resilience programs at MoneyGram. Scaling automation and global teams for a regulated fintech organization.
Responsibilities:
- Transform and continuously mature MoneyGram’s global cybersecurity GRC organization
- Modernize governance, risk management, compliance, third-party risk, audit, security awareness, and resilience programs
- Develop a target-state operating model, multi-year modernization roadmap, service metrics, KPIs, and maturity targets
- Define and maintain global cybersecurity policies, standards, frameworks, and governance processes
- Lead enterprise cyber risk identification, assessment, quantification, mitigation planning, metrics, KRIs, dashboards, and executive reporting
- Oversee regulatory compliance, examinations, audits, certifications, assessments, remediation, and regulatory engagements across operating regions
- Own the strategy, implementation, adoption, and optimization of GRC technology platforms including Vanta
- Automate evidence collection, control monitoring, risk workflows, policy management, audit readiness, and compliance reporting
- Lead global third-party cyber risk management, vendor assessments, monitoring, remediation, and contractual security requirements
- Oversee security awareness, education, culture, and human risk management initiatives
- Maintain incident response preparedness, crisis management, tabletop exercises, and regulatory reporting readiness
- Advise executive leadership and represent cybersecurity with regulators, auditors, customers, and strategic partners
- Lead and develop a high-performing GRC organization and establish performance, development, succession, and accountability programs
Requirements:
- 15+ years of experience in cybersecurity, information security, risk management, compliance, audit, or related disciplines
- Minimum 7+ years of progressive leadership experience managing large cybersecurity, risk, or compliance organizations
- Proven experience transforming and scaling enterprise GRC programs within fintech, payments, banking, financial services, or similarly regulated industries
- Experience building and optimizing teams, operating models, and organizational capabilities
- Significant experience implementing and operationalizing GRC platforms such as Vanta, ServiceNow GRC, Archer, AuditBoard, OneTrust, or similar technologies
- Deep expertise in cybersecurity governance frameworks, regulatory compliance, audit management, and enterprise risk management
- Experience leading complex regulatory examinations and engagements across multiple jurisdictions
- Strong understanding of AWS, Azure, GCP, DevSecOps practices, and modern technology architectures
- Ability to drive large-scale transformation initiatives while managing multiple competing priorities
- Demonstrated success influencing executive leadership and operating effectively within matrixed organizations
- Exceptional communication and presentation skills, including regulator-facing experience
- Bachelor's degree in Cybersecurity, Information Systems, Risk Management, Business, or related field
- Preferred certifications: CISSP, CISM, CRISC, CCSP, PCI ISA, ISO 27001 Lead Implementer or Lead Auditor
- Preferred experience across multiple continents and regulatory regimes, quantitative cyber risk methodologies, AI governance and AI risk management, publicly traded companies, and automation/process redesign initiatives
Benefits:
- GRC technology and automation capabilities, including Vanta
- Career development pathways and succession plans
- Global organization exposure and executive, regulator, auditor, customer, and strategic partner engagement
Similar Jobs
Senior Information Security Engineer
Senior Information Security Engineer securing MoneyGram’s cross-border money transfer systems. Implementing detection, incident response, cloud security, vulnerability management, and automation controls.
IT Security Specialist – Identity & Access Management, Migration Consultant
IAM migration consultant leading enterprise authentication modernization from ForgeRock OpenAM to PingOne Advanced Identity Cloud and Microsoft Entra ID. Minimizing disruption through SSO implementation, testing, documentation, and post-migration support.
Residential Physical Security Specialist
Residential security specialist protecting Rocket Companies executives, private residences, and families. Coordinating executive protection assignments and mitigating physical security risks.
Security Engineer Consultant II
Security Engineer Consultant II designing and implementing cloud and application security solutions for Allstate’s insurance business. Supporting DevOps/SecOps, vulnerability management, and secure IaaS/PaaS/SaaS implementations.
Staff Security Engineer – Threat Detection
Staff Security Engineer building AI-powered threat detections and response workflows at Snowflake, a cloud data platform. Improving detection coverage, automation, and security analytics at global scale.
Security Director
Director of Security protecting Zcash wallets, protocols, and cryptographic infrastructure at ZODL. Leading incident response, audits, security policy, and proactive vulnerability mitigation across a distributed global team.
Senior Datadog Security – Observability Engineer
Senior Datadog engineer scaling detection engineering and security observability for Keeper Security’s cybersecurity platform. Building SIEM rules, telemetry pipelines, dashboards, and monitoring across AWS environments.
Engenheiro de Segurança do Trabalho
Engenheiro de Segurança do Trabalho remoto apoiando gestão de contingência e emergências na Petrobras. Elaborando planos, painéis Power BI, treinamentos, auditorias e análises de risco de processo.
Senior Agentic AI Specialist – Integrations, Security and Continuous Evolution
Especialista sênior evoluindo a plataforma AIDA de IA agêntica para integrações corporativas seguras. Implementando RAG, controles de segurança, validações e monitoramento contínuo dos agentes.
Senior Security Engineer
Senior Security Engineer developing and securing enterprise, cloud, and infrastructure cybersecurity solutions for European public-sector clients. Automating operations, hardening systems, and resolving security issues.
Senior Security Engineer, Data Loss Prevention
Senior Security Engineer protecting Fragomen’s immigration law firm data through enterprise DLP controls. Investigating exposure risks and integrating Microsoft 365, cloud, SaaS, endpoint, and SIEM security capabilities.
Security Systems Installation
Sr. Coordinator supporting Interface Systems’ managed business security installations. Troubleshooting Access Control, CCTV/VMS, alarms, and low-voltage systems for field technicians.
Security Alarm Technician
Security Alarm Technician installing and servicing intrusion, fire, surveillance, network, and wireless systems. Interface Systems delivers managed security, network, UCaaS, and business intelligence solutions.
Security Alarm Technician
Security Alarm Technician installing and servicing intrusion, fire, surveillance, access control, and network systems. Interface Systems delivers managed security, connectivity, and IT solutions to distributed enterprises.
Business Information Security Lead
Business Information Security Lead securing US Foods’ digital foodservice technology ecosystem. Managing cybersecurity risks, compliance, assessments, and remediation across DigiTech value streams.
Senior Security Engineer
Senior Security Engineer enhancing cybersecurity capabilities across multiple domains for EverCommerce. Collaborating with various teams to improve security posture in a growing environment.
Senior Consultant – Cloud Red Team, Blue Team
Sr. Consultant performing cloud-focused adversary emulation techniques. Collaborating with clients to validate security defenses and improve cloud security measures.
Senior Security Research Engineer
Joining Picus as a Senior Security Research Engineer, focusing on technical content in cybersecurity. Engage in deep research, shaping the market's understanding of exposure validation.
Principal Network Security Engineer
Principal Network Security Engineer leading design and architecture of Autodesk's global network security infrastructure. Collaborating with IT to enhance security posture across cloud and hybrid networks.
Senior Copywriter, B2B SaaS, Cybersecurity
Senior Copywriter responsible for content creation for B2B SaaS and Cybersecurity. Requires understanding diverse client needs and producing tailored communication.