GRC Manger/Virtual CISO
Core
Lead the end-to-end governance, risk, and compliance function for a global SaaS organization, ensuring regulatory compliance, customer trust, and successful certification audits.
Role type
Senior GRC Manager / Virtual CISO
Builds
Mature ISMS and AIMS governance frameworks, certification roadmaps, and customer assurance programs.
Domain
Cyber Security Governance, Risk & Compliance in SaaS
Required skills
ISO 27001 management system ownership, audit program management, risk register management, third-party risk assessment, AI governance, stakeholder engagement, documentation
Preferred skills
ISO 42001, IRAP, DISP, Essential Eight, GRC platforms, CISM/CISA/CRISC/CIPP certifications
Technologies
GRC platforms
Responsibilities
Own and manage certification programs (ISO 27001, ISO 42001, IRAP, etc.), maintain ISMS and AIMS governance frameworks, lead vendor and third-party security assessments, manage customer security questionnaires and RFP responses, act as a trusted advisor to executive leadership.
Seniority
Senior, hands-on IC