Senior Cybersecurity Governance, Risk and Compliance Manager

BECU

. Develop, evolve, and continuously improve cybersecurity GRC programs, processes, standards, guidelines, and supporting disciplines .

Posted 10/15/2026full-timeUnited StatesSenior💰 $156,200 - $190,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and improving cybersecurity Governance, Risk, and Compliance (GRC) programs, leveraging frameworks such as NIST CSF and PCI/DSS, while effectively collaborating with stakeholders to enhance cybersecurity maturity and compliance. Proficient in utilizing GRC tools and automation technologies to drive performance metrics and reporting.

Highest-signal resume keywords

Cybersecurity Governance, Risk, And Compliance (GRC)NIST CSF FrameworkPCI/DSS ControlsCISSP CertificationCollaboration With Stakeholders

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity FrameworksRisk Evaluation AutomationContinuous Control MonitoringVulnerability ManagementPenetration TestingServer ConfigurationDesktop ConfigurationEncryptionPerformance Metrics DevelopmentRegulatory Compliance

Soft Skills

CollaborationInfluencing LeadershipKnowledge SharingTraining DevelopmentSound Judgment

Tools & Technologies

Power BIPower AutomateMicrosoft Power PlatformGRC ToolsAutomated Monitoring Solutions

Certifications & Qualifications

CISSPCCSPCISMGIACCISACRISCPCIPISAQSA

Industry Keywords

CybersecurityComplianceAuditInformation SecurityThird-Party Cyber RiskFFIEC GuidanceGLBA ControlsSOX

Tech Stack

Tools & technologies

Cyber SecurityFirewalls

About the role

Key responsibilities & impact

Develop, evolve, and continuously improve cybersecurity GRC programs, processes, standards, guidelines, and supporting disciplines
Establish and mature second-line oversight of BECU’s cybersecurity control framework
Partner with first-line control and solution owners to identify gaps, clarify ownership, and drive remediation
Support cybersecurity-related regulatory examinations, including NCUA and Washington State DFI engagements
Translate cybersecurity frameworks, regulatory expectations, and evolving requirements into practical standards and control expectations
Advance Continuous Control Monitoring through automated monitoring, gap identification, issue management, remediation workflows, dashboards, and reporting
Modernize GRC using workflow automation, integrations, AI-enabled capabilities, Power BI, Power Automate, and Microsoft Power Platform
Identify cybersecurity maturity improvements and develop actionable plans
Interpret cybersecurity information to identify control or compliance issues, engage owners, provide oversight, and escalate concerns
Create and maintain cybersecurity performance and risk metrics, dashboards, and reporting
Build relationships across cybersecurity, technology, Compliance, architecture, IAM, AI governance, and other teams
Represent cybersecurity perspectives in AI governance and support responsible adoption of emerging technologies
Evolve cybersecurity standards and guidelines, including PCI-related governance considerations
Provide stakeholder awareness, education, and knowledge sharing
Perform other duties supporting cybersecurity governance, risk, compliance, and control objectives

Requirements

What you’ll need

Bachelor’s degree in Information Security, Computer Science or related field, or equivalent work or education-related experience
Advanced degree preferred
7 years of cybersecurity experience or related experience in IT, Compliance, or Audit
Expertise leveraging GRC frameworks including FFIEC guidance, GLBA controls, PCI/DSS controls, SOX, NIST CSF, and other relevant laws and regulations required
Experience applying frameworks to increase cybersecurity maturity capabilities in an enterprise environment
Ability to collaborate with and influence stakeholder and partner leadership and management, including vendors and third parties
Working knowledge of GRC tools, risk evaluation automation, enterprise risk integration, and reporting
Understanding of information and security systems to identify risk exposure, including third-party cyber risk
Ability to work independently and as a team member, using discretion and sound judgment
Ability to set training goals and objectives, present programs, and provide training materials
Working knowledge of firewalls, vulnerability management, penetration testing, server and desktop configuration and controls, and encryption
Ability to share knowledge and explain technical and business topics
Preferred certifications include CISSP, CCSP, CISM, GIAC, CISA, CRISC, PCIP, ISA, or QSA

Benefits

Comp & perks

401(k) Company Match (up to 3%)
4% annual contribution to your 401(k) by BECU
Medical, Dental and Vision (family contributions as well)
PTO Program + Exchange Program
Tuition Reimbursement Program
BECU Cares volunteer time off + donation match
Performance-based compensation incentives