Senior Manager, GRC

Papa Johns

. Establish and operate the enterprise cybersecurity risk management program .

Posted 10/30/2026full-timeRemote • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in establishing and managing cybersecurity risk management programs, including governance, risk, and compliance (GRC) frameworks. Proven ability to lead cross-functional teams and influence stakeholders while ensuring effective control implementation and continuous improvement.

Highest-signal resume keywords

Cybersecurity Risk ManagementGovernance, Risk, And Compliance (GRC)Cybersecurity Control FrameworksThird-Party Risk ManagementSecurity Awareness Programs

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk Acceptance FrameworksControl FrameworksVulnerability ManagementIncident ManagementSOX ITGC ComplianceControl ValidationRisk ReportingAudit EngagementsStakeholder AlignmentBudget Management

Soft Skills

LeadershipCommunicationJudgmentInfluencingCollaboration

Industry Keywords

CybersecurityComplianceRisk ManagementAuditVendor Assessments

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Establish and operate the enterprise cybersecurity risk management program
Define and enforce risk acceptance, escalation, and accountability frameworks
Develop executive- and board-level risk reporting aligned to business impact
Define and govern cybersecurity policies, standards, and control frameworks
Ensure consistent control implementation and enforcement across IT, cloud, and business environments
Lead exception management processes
Establish and lead the third-party risk management program, including vendor tiering and assessments
Coordinate regulatory and internal and external audit engagements
Partner across Security, IT, Legal, Compliance, and Procurement to align risk and control expectations
Establish and govern the cybersecurity awareness and training program
Oversee control validation, testing, and assurance activities
Ensure governance of vulnerability management, logging, and detection capabilities
Drive continuous improvement through risk insights, incident learnings, and control effectiveness reviews
Manage and optimize budget and resources supporting governance, risk, and compliance capabilities

Requirements

What you’ll need

6–10+ years of experience in cybersecurity risk management
Proven leadership experience in building, scaling, and maturing teams and operating models
Strong understanding of cybersecurity control frameworks
Demonstrated ability to translate technical risk into business impact and action
Experience building or maturing GRC programs in complex organizations
Strong judgment in prioritization, tradeoff decisions, and stakeholder alignment
Experience supporting or leading SOX ITGC and/or application control environments in a complex organization
Experience establishing or evolving security awareness and behavior change programs
Excellent communication skills and ability to influence across technical and business stakeholders
Experience working with third-party risk, audit, and compliance functions
Must comply with employment eligibility and Right to Work requirements; employment eligibility is verified through E-Verify