Cyber Security and GRC Lead

About the role

Global Knowledge is seeking a hands‑on Cyber Security and GRC Lead to own the end‑to‑end security posture across governance, risk, and technical domains. This high‑autonomy individual contributor role combines ownership of audit and assurance programs with practical security leadership for cloud, application, and operational environments.

Key responsibilities

• Build and run an annual security calendar covering audits, evidence refresh, control testing, and governance forums.
• Maintain a live risk register with clear ownership, treatment plans, and escalation paths.
• Define remediation SLAs and drive cross‑functional closure of high‑ and medium‑risk findings.
• Partner with Engineering and DevOps to strengthen secure SDLC practices, including code scanning and dependency risk management.
• Establish and improve cloud security baselines, access controls, logging, encryption, and privileged access hygiene.
• Lead security review and sign‑off processes for major architectural or platform changes.
• Improve quality and turnaround time of customer assurance responses using reusable evidence and standard narratives.
• Deliver monthly executive posture updates with clear trend analysis and decision points.

Required profile

• 8‑12+ years of experience in cyber security, covering both GRC and technical delivery.
• Proven ownership of audits and assurance programs such as ISO 27001 and SOC 2.
• Demonstrated experience implementing technical controls in cloud, application, and operational environments.
• Strong knowledge of risk management, POA&M governance, and control lifecycle management.
• Ability to lead outcomes across teams without direct line authority.
• Excellent communication skills for technical, business, and executive audiences.

Required skills

• ISO 27001
• SOC 2
• Cloud security
• Vulnerability management
• Incident response
• Security architecture
• Secure SDLC
• Code scanning
• Dependency risk management
• Access control
• Logging and encryption
• Privileged access management