Sr. Cybersecurity GRC Manager

Sr. Cybersecurity GRC Manager Hyundai Capital America (HCA) helps people move forward. Through Hyundai Motor Finance, Genesis Finance, and Kia Finance, we deliver innovative financing, leasing, and insurance solutions to more than 3 million customers and businesses nationwide. We’re a company driven by growth, innovation, and people. At HCA, you’ll find opportunities to build new skills, expand your career, and make a real impact—while working in a diverse, inclusive, and values‑driven environment. We’re proud to support our communities through volunteerism, philanthropy, and engaged Employee Resource Groups. If you’re looking for a fast‑paced, collaborative workplace where your ideas matter, join us as we lead the future of financing freedom of movement. WHAT YOU WILL DO The Sr. Cybersecurity Risk Manager requires a deep understanding of security risk management and the evolving threat landscape, ensuring the internal security risk strategy is resilient and forward‑thinking to oversee the security risk posture internally, proactively identifying, assessing, and mitigating risks that could impact business operations, financial stability, and regulatory compliance. In addition, this role may assist the development of vendors/partners security risk evaluation to ensure alignment with our cybersecurity policies, regulatory requirements, and risk mitigation strategies. HOW YOU WILL MAKE AN IMPACT Develop and executive internal security risk assessments, threat modeling, and impact analyses to identify vulnerabilities across internal leveraged solutions, systems, applications, and processes including guiding and supporting team to ensure effective collaboration for assigned projects and work efforts. Develop, execute and enhance a cybersecurity risk management framework aligned with business objectives and regulatory requirements. Establish and maintain security risk metrics by tracking Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs), along with reporting mechanisms to communicate cybersecurity effectiveness and provide actionable insights to executives and stakeholders. Manage governance around internal cybersecurity risks, ensuring compliance with internal security policies and regulatory requirements. WHAT YOU WILL BRING TO THE ROLE Minimum 8 years progressive experience in cybersecurity governance, risk management, or compliance with a deep understanding of security risk management, system development life cycle (SDLC), and the evolving threat landscape ensuring the internal security risk strategy is resilient and forward‑thinking. Financial services industry preferred. Bachelor’s degree in finance, business or related discipline. Certifications such as CISSP, CISM, CRISC, CGEIT, and ITIL are highly desirable. Strong knowledge of Information Security risk management frameworks, Governance, Risk, and Compliance process, IT general controls (e.g. asset classification, risk assessments, vulnerability and threat analysis, risk treatment, audit controls and remediation, vendor risk management, and IT risk management & reporting). Strong knowledge of Information Security & Risk Frameworks including ISO 27001/2, ISO 310002018, ISO 270052022; NIST Special Publications and Methodologies (e.g. SP800-12, 30, 37, 39, 53, 150, 161). Working knowledge of California Consumer Privacy Act (CCPA), Gramm-Leach-Bliley Act (GLBA), NYDFS Cybersecurity Regulation, PCI-DSS, FFIEC, SOX, and other relevant laws and regulations. WE TAKE CARE OF OUR PEOPLE At HCA, we know our success starts with our people. We offer a comprehensive rewards package designed to support your health, financial wellbeing, and life outside of work — so you can bring your best every day. In addition to competitive pay, our benefits include: Hybrid work schedule offering 4 on-site days and 1 remote day per week Vehicle benefits designed around your role , including monthly allowances and purchase and lease discounts Flexible health coverage with medical, dental, and vision plans, including no cost and low-cost options Annual employer HSA contribution to help offset healthcare expenses 401(k) with company match and immediate vesting , so you can start building your future from day one 100% company paid life and disability insurance for added peace of mind Wellbeing programs at no cost to you , including gym benefits and health resources Generous parental leave to support growing families Paid Volunteer Time Off , plus a company donation to a charity of your choice At HCA, our benefits are more than perks — they’re part of our commitment to supporting you at work and in life. Learn more about benefits at HCA! OTHER DETAILS Our Company is an equal opportunity employer committed to fostering a diverse, inclusive, and respectful workplace—because we believe diversity builds stronger teams. We comply with all applicable federal, state, and local equal employment opportunity laws and do not discriminate on the basis of race, religion or creed, color, national origin, ancestry, caste, citizenship, sex or gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, age, disability, medical condition, genetic information, marital status, family care or medical leave status, military or veteran status, political affiliation, or any other characteristic protected by law. Information provided during the application process is requested in good faith and will be used solely in accordance with applicable employment laws. This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here. This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used or whether that information is sold or shared, so that you can exercise meaningful control over our use of personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (CCPA). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at View email address on click.appcast.io. #J-18808-Ljbffr