Kforce Inc. logo

Manager of Cybersecurity GRC

Kforce Inc.

  • Salt Lake City, UT
  • 1 day ago
  • $150,000–$170,000

Highlights

Kforce's client in Salt Lake City, UT is seeking an experienced Cybersecurity Governance, Risk & Compliance (GRC) Manager to lead enterprise cybersecurity risk management, compliance initiatives, and governance programs. This individual will play a key role in strengthening the organization's security posture by overseeing risk assessments, policy development, regulatory compliance efforts, vendor security reviews, security awareness programs, and cybersecurity reporting.

Numbers & Facts

LocationSalt Lake City, UT
IndustryFinancial Services
Salary$150,000–$170,000
Company Size1,000 to 1,499 employees
Year Founded1962
Websitehttp://www.kforce.com/

Description

Kforce's client in Salt Lake City, UT is seeking an experienced Cybersecurity Governance, Risk & Compliance (GRC) Manager to lead enterprise cybersecurity risk management, compliance initiatives, and governance programs. This individual will play a key role in strengthening the organization's security posture by overseeing risk assessments, policy development, regulatory compliance efforts, vendor security reviews, security awareness programs, and cybersecurity reporting. Key Responsibilities:
  • Lead enterprise cybersecurity governance and risk management initiatives
  • Conduct ongoing risk assessments to identify threats, vulnerabilities, and emerging cybersecurity concerns
  • Develop, maintain, and execute risk treatment and mitigation plans aligned with business objectives
  • Monitor organizational risk exposure and communicate risk findings to leadership and stakeholders
  • Ensure alignment with industry standards, regulatory requirements, and internal controls
  • Develop and maintain cybersecurity policies, standards, procedures, and governance frameworks
  • Evaluate and update security documentation to align with evolving threats, business needs, and regulatory expectations
  • Partner with business units to drive policy adoption, awareness, and compliance throughout the organization
  • Design and manage enterprise-wide cybersecurity awareness programs
  • Deliver training initiatives focused on security best practices, compliance obligations, and emerging cyber threats
  • Measure program effectiveness and continuously improve awareness efforts based on risk trends and organizational needs
  • Serve as a primary cybersecurity contact for internal and external audit activities
  • Coordinate audit responses, remediation efforts, and compliance reporting
  • Support payment card industry (PCI) compliance programs and ensure ongoing adherence to applicable requirements

Requirements:

Preferred Certifications:
  • CISSP (Certified Information Systems Security Professional)
  • CISM (Certified Information Security Manager)
  • CRISC (Certified in Risk and Information Systems Control)
  • CDPSE (Certified Data Privacy Solutions Engineer)
  • 5+ years of experience in cybersecurity governance, risk management, compliance, or information security leadership
  • Experience conducting enterprise risk assessments and developing risk mitigation strategies
  • Proven success creating and maintaining cybersecurity policies, standards, and governance frameworks
  • Experience managing security awareness and training programs
  • Strong understanding of audit processes and regulatory compliance requirements
  • Experience supporting compliance efforts related to PCI-DSS, GDPR, CCPA, SOX, or similar frameworks
Desired:
  • Strong knowledge of cybersecurity control frameworks including NIST CSF, NIST 800-series, ISO 27001, and PCI-DSS
  • Expertise in cybersecurity risk identification, assessment, reporting, and remediation planning
  • Experience managing third-party and vendor cybersecurity risk programs
  • Familiarity with AI governance, emerging technology risks, and security implications of AI adoption
  • Knowledge of privacy regulations and data protection standards
  • Strong analytical, organizational, and problem-solving capabilities
  • Excellent verbal and written communication skills with the ability to engage both technical and non-technical stakeholders
  • Ability to build relationships and influence cross-functional teams across technology, legal, privacy, audit, and business functions
Preferred:
  • Experience leading enterprise GRC programs, partnering with audit and compliance organizations, and operating within regulated environments will be highly successful in this role
  • Experience developing cybersecurity metrics, vendor risk programs, and privacy-focused security initiatives is strongly preferred

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking “Apply Today” you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.


About Company

Kforce is a solutions firm specializing in technology, finance and accounting, and professional staffing services. Our KNOWLEDGEforce® empowers top companies to achieve their digital transformation goals. We curate teams of technical experts who deliver solutions custom-tailored to each client’s needs. These scalable, flexible outcomes are shaped by deep market knowledge, thought leadership and our multi-industry expertise.

 

Our integrated approach is rooted in 60 years of proven success deploying highly skilled professionals on a temporary and direct-hire basis. Each year, approximately 18,000 talented experts work with the Fortune 500 and other leading companies. Together, we deliver Great Results Through Strategic Partnership and Knowledge Sharing®.

Similar Jobs