Cyber GRC Lead

Cyber GRC Lead - Investment Firm - NYC based

Find out exactly what skills, experience, and qualifications you will need to succeed in this role before applying below.

One of the first security hires on the ground in the US, with a direct line to the Head of Security and full ownership of GRC. The security function is growing in the US, and you are coming in at the right moment to make your mark. You will own the GRC program end to end. That means driving external audits including ISAE 3402, Cyber Essentials Plus, SWIFT CSP, and financial systems audits.

You will handle investor queries independently and work directly with the Head of Security. The focus is on owning external audits end to end (ISAE 3402/SOC, SOX IT controls, SWIFT CSP and Cyber Essentials Plus), leading investor due diligence, and building toward ISO 27001. The team is AI-first, so rather than relying on a GRC platform, you'd automate evidence collection and control testing using tools like Claude and Excel.

This will be a contract to hire, long term opportunity. Must be based in the NYC area and able to commute between two main offices. xhyhwjd

Previous senior level GRC experience required.